1dad9700be7f53e115d0906edf87e84872f9ec9d0b837549aed0d140bc647cfa

Sharing

Copy URL Twitter E-mail

General

Target

1dad9700be7f53e115d0906edf87e84872f9ec9d0b837549aed0d140bc647cfa
Size

1.8MB
MD5

6de85be06ce0361d87c136e2a6fd3883
SHA1

702092ead81aaa826c8ddeb76c6f1192fe2c3f71
SHA256

1dad9700be7f53e115d0906edf87e84872f9ec9d0b837549aed0d140bc647cfa
SHA512

50036067415076d46335fa2b391593db5bd700587926795d82104f34d3dfd5e96a94255bad59ccc3281310482835e50fcdac71a033e2b1f1a739cbd8013b0d57
SSDEEP

24576:uH3sDXbB1XA26IulA1SCaAlR7a/Ezq1CJDrwHb/IRTv78vvDudQQRtQ:DRu2601Ra2m/+q1sKIRTD8vlOQ

Score

N/A

Malware Config

Signatures

Files

1dad9700be7f53e115d0906edf87e84872f9ec9d0b837549aed0d140bc647cfa
.dll windows x86

0b5a7159e63ac97715d03862380fa252

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
GetCapture
GetClipboardOwner
GetClipboardViewer
GetFocus
GetMessagePos
GetCaretPos
GetCursorPos
GetQueueStatus
GetMessageTime

gdi32

CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
DeleteDC
DeleteObject
GetBitmapBits

advapi32

RegQueryValueExA
GetUserNameA

kernel32

WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
EnterCriticalSection
GetModuleFileNameA
SystemTimeToFileTime
GetSystemTime
GetCurrentThreadId
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
FreeLibrary
CloseHandle
GetVersionExA
HeapDestroy
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
VirtualAlloc
VirtualFree
GetSystemInfo
ReadFile
CreateFileA
GetProcessWorkingSetSize
GetCurrentProcess
GlobalMemoryStatus
GetStartupInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetProcessTimes
GetThreadTimes
GetCurrentThread
Sleep
GetSystemTimeAsFileTime
SetEnvironmentVariableW
LeaveCriticalSection
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
RtlUnwind
WideCharToMultiByte
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
GetTimeZoneInformation
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP

Exports

Exports

R_FIPS140_MODULE_get_supported_interfaces
R_FIPS140_MODULE_set_failure_reason_cb
R_FIPS140_MODULE_set_test_details_cb

Sections

.text
Size: 664KB - Virtual size: 662KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 952KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA1
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b5a7159e63ac97715d03862380fa252

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 664KB - Virtual size: 662KB

.rdata Size: 952KB - Virtual size: 948KB

.data Size: 112KB - Virtual size: 317KB

_RDATA Size: 4KB - Virtual size: 96B

_DATA1 Size: 60KB - Virtual size: 56KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 52KB - Virtual size: 49KB

.text
Size: 664KB - Virtual size: 662KB

.rdata
Size: 952KB - Virtual size: 948KB

.data
Size: 112KB - Virtual size: 317KB

_RDATA
Size: 4KB - Virtual size: 96B

_DATA1
Size: 60KB - Virtual size: 56KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 52KB - Virtual size: 49KB