4f9d2dc5181ea88f9e75a82fa42b1a4feb57e67f74b76b027302df60b389ba7f

General

Target

4f9d2dc5181ea88f9e75a82fa42b1a4feb57e67f74b76b027302df60b389ba7f
Size

379KB
MD5

64b9962cd78da206a4b302f67bce04fe
SHA1

0554058e2b64a677a5bc514c2db1d2aa75880ea6
SHA256

4f9d2dc5181ea88f9e75a82fa42b1a4feb57e67f74b76b027302df60b389ba7f
SHA512

c07720d19172f7d3162a75487746f18c948092858c1adf262f8bf1cc281bf1b6745fab7043e7f1ec430d3fbb6ffe678a8f834569bf4e9b7b440a449e56b83bde
SSDEEP

6144:E7sdbj5Iwzx/CF7h0025rQeTZHdqjW01zhuB1aKNXdm1+9+Yu7SpMyh:E7o/5JVKcQeTqa01UB1aAdVbu7SpM

Score

N/A

Malware Config

Signatures

Files

4f9d2dc5181ea88f9e75a82fa42b1a4feb57e67f74b76b027302df60b389ba7f
.dll windows x86

ee04768c0de6f89c04618712e1562361

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
LsaLookupNames

ole32

CoTaskMemFree
StringFromCLSID

kernel32

lstrlenW
WriteFileGather
WideCharToMultiByte
CreateFileA
CreateProcessA
CreateRemoteThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteTimerQueueEx
ExitProcess
FreeLibrary
GetACP
GetCommandLineA
GetConsoleWindow
GetCurrentConsoleFont
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetLongPathNameA
GetModuleHandleA
GetProcessPriorityBoost
GetShortPathNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
InitializeCriticalSection
InterlockedExchange
LoadLibraryA
QueryPerformanceCounter
VirtualAlloc
WaitForSingleObject

Exports

Exports

CreateContext
CreateInterface
GenerateOutputDecl
GetFirstRow
GetSyntaxIdOfAttribute
Listener3f
SHRotateZ
TypeToAdsTypeUTCTime

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee04768c0de6f89c04618712e1562361

Headers

File Characteristics

Imports

advapi32

ole32

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 184KB - Virtual size: 184KB

.data Size: 69KB - Virtual size: 70KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 184KB - Virtual size: 184KB

.data
Size: 69KB - Virtual size: 70KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 3KB - Virtual size: 3KB