1a0bfbcf1d24d65105a96f2769fb7a30ec9ed780a90148355713144240dd04eb

Sharing

Copy URL Twitter E-mail

General

Target

1a0bfbcf1d24d65105a96f2769fb7a30ec9ed780a90148355713144240dd04eb
Size

135KB
MD5

32606056cbadbf2103f9c67661683b59
SHA1

881e916e82f9051eaa167c67cd6e8297648ea110
SHA256

1a0bfbcf1d24d65105a96f2769fb7a30ec9ed780a90148355713144240dd04eb
SHA512

d5aa64ef38d103f82acf74d831ab348d6f7e888da74acdd3549cacbabb89ee1af2e0206f686a3e56954118d60e43868ef2c8d33ba5aeb9ef49f85581f8f477b4
SSDEEP

1536:a6Mfw2U50Bn1IwnkTseC7Gu7t753WVzGviefnUoxVjEO7ShOVN2BH3eyJv+sp:nMo2d1I4eC7/553WViv1/J/yOWt3eXw

Score

N/A

Malware Config

Signatures

Files

1a0bfbcf1d24d65105a96f2769fb7a30ec9ed780a90148355713144240dd04eb
.dll windows x86

995f357aacad839dbc4d09c3078f6824

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetLayeredWindowAttributes
SetWindowPos
SetWindowLongW
GetWindowLongW
GetWindowInfo

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

xpcom

NS_Alloc

kernel32

VirtualFree
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile

Exports

Exports

NSGetModule

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

995f357aacad839dbc4d09c3078f6824

Headers

File Characteristics

Imports

user32

nspr4

xpcom

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 63KB - Virtual size: 64KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 63KB - Virtual size: 64KB