095561c6b6f8dbb9a340d9da7df812109f817bfe6f9c1d8ed9f6072d22a07089

Sharing

Copy URL Twitter E-mail

General

Target

095561c6b6f8dbb9a340d9da7df812109f817bfe6f9c1d8ed9f6072d22a07089
Size

244KB
MD5

64593e7df450767cd19a3fdfd1a3773e
SHA1

4e025e7c83b51cac4095f9ff977e82dd963eab06
SHA256

095561c6b6f8dbb9a340d9da7df812109f817bfe6f9c1d8ed9f6072d22a07089
SHA512

2fccfbd41f629026701a6f6c23f86dd3f3b5b14cf87a4a045f6fc06f9d3032fadd2f1abd65904a036cf43b9da7f00e39bd0c46053dff2951f0d43d6d77b8471b
SSDEEP

6144:5gmqfywr+xCnrVVufCbRuxO1K6Ea4qeqi8l9:LRfqrrufCb2V1scc

Score

N/A

Malware Config

Signatures

Files

095561c6b6f8dbb9a340d9da7df812109f817bfe6f9c1d8ed9f6072d22a07089
.dll windows x86

588614ecd9f904bc07905cc5efff3660

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapCreate
InitializeCriticalSection
IsBadReadPtr
LockResource
Module32FirstW
Process32FirstW
ReadFile
ReadFileEx
ReplaceFileW
GlobalLock
SetConsoleTitleA
SetFileAttributesW
SetVolumeLabelA
UnmapViewOfFile
VirtualProtectEx
lstrcatW
lstrcpynA
lstrlenA
GetVersionExA
GetModuleHandleA
GetFileSizeEx
GetDateFormatA
GetCurrentProcessId
GetCommandLineA
GetBinaryTypeA
ExpandEnvironmentStringsW
ExitProcess
EnumDateFormatsExW
CreateJobObjectW
AddConsoleAliasW

oleaut32

SysFreeString
SysStringLen
VarCyFromDec
VarI4FromR4
VariantCopy
VariantCopyInd
SafeArrayGetElemsize

advapi32

RegDeleteKeyA

ole32

StgCreateDocfile
OleCreateLinkToFile
OleCreateEx
CoRegisterMallocSpy
CoGetClassVersion
CoTaskMemRealloc

ntdll

wcscspn
RtlDestroyEnvironment
wcscpy
RtlInitString

imm32

ImmGetImeMenuItemsW
ImmReSizeIMCC
ImmUnregisterWordA
ImmGetConversionListA
ImmIsIME
ImmGetVirtualKey
ImmEnumInputContext

comctl32

CreatePropertySheetPageA
PropertySheetA

Exports

Exports

Burn
ConvertToCIFFJPEG
D3D10SetDirect3DDevice
D3D9SetDirect3DDevice
DevelopNormalTblToLogTbl
EjectLoadCD
EnumFlashSettingRelease
EnumVolumeReset
GetAPIVersionEx
GetExtractJpegSize_ByModelName
GetFile2
GetLocalizedWaitCDTexts
GetSplineArray
ReadAtCapDevParamFromRAW
SetDoubleForDevice

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

588614ecd9f904bc07905cc5efff3660

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

ole32

ntdll

imm32

comctl32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 72KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 72KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB