0d5d2c6495274e02cd10bac62d45a91eab314710469fe5683aad13b96bbb1ae5

Sharing

Copy URL Twitter E-mail

General

Target

0d5d2c6495274e02cd10bac62d45a91eab314710469fe5683aad13b96bbb1ae5
Size

112KB
MD5

6e6655b6e0e03cbf6dc4fff33a901794
SHA1

2eb397a3e8ee4ebb5bc87c1d903eb62b749f1aa0
SHA256

0d5d2c6495274e02cd10bac62d45a91eab314710469fe5683aad13b96bbb1ae5
SHA512

fdfe12158ee3202f2141d12e13082d4c8c9b4b315503032c4d282a076c1fa426983406ef6f50b94d33d89d383be9b497456cded6d9a070a1b8258504f3cfb697
SSDEEP

3072:uyvpjdgeJapt8wrq+sifLEs76ZLJdNJujsJjhxd95wm7:pvpjd3afmVSLZCNQYF57

Score

N/A

Malware Config

Signatures

Files

0d5d2c6495274e02cd10bac62d45a91eab314710469fe5683aad13b96bbb1ae5
.dll windows x86

26025c34f78c3f5995d57de30cf1d63b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dinput

DirectInputCreateW

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

user32

GetCaretPos
BeginDeferWindowPos
UpdateWindow
ShowWindow
SetSystemCursor
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
CharLowerBuffA
GetForegroundWindow
GetKeyState
EnumPropsA
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA

ole32

IsEqualGUID
PropVariantClear

advapi32

FileEncryptionStatusA
SetUserFileEncryptionKey
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetSecurityDescriptorDacl
GetAclInformation
GetAce
AddAccessDeniedAce

shell32

ShellExecuteA
SHGetSpecialFolderPathW
SHFileOperationW

kernel32

GetTempPathW
GetSystemInfo
GetSystemDefaultLangID
GetStringTypeExA
GetPrivateProfileSectionW
GetTimeZoneInformation
GetFileAttributesExA
GetCurrentProcessId
GetConsoleOutputCP
GetConsoleAliasA
GetCommandLineA
GetBinaryTypeA
FormatMessageA
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
HeapAlloc
HeapCreate
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
SetFileTime
TlsGetValue
WaitForMultipleObjectsEx
lstrcmpA
GetModuleHandleA
FlushConsoleInputBuffer
FindNextVolumeW
FindAtomW
Beep
BindIoCompletionCallback
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnumTimeFormatsA
ExitProcess
FindAtomA

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26025c34f78c3f5995d57de30cf1d63b

Headers

File Characteristics

Imports

dinput

version

user32

ole32

advapi32

shell32

kernel32

Sections

.text Size: 76KB - Virtual size: 75KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 76KB - Virtual size: 75KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB