1a92aac41bcaf63276e1de6353c30b954e2edb4a6627aaa3e963488c98a44506

Sharing

Copy URL Twitter E-mail

General

Target

1a92aac41bcaf63276e1de6353c30b954e2edb4a6627aaa3e963488c98a44506
Size

248KB
MD5

61f02c21f4d9bb3fe4f79856a4e5d08c
SHA1

d03f332dc46e124c37b9bdecc1c009753c65a085
SHA256

1a92aac41bcaf63276e1de6353c30b954e2edb4a6627aaa3e963488c98a44506
SHA512

e729dd1cee034d5c14604f32ebd2b40fe6361f112cf30674ed2da64ddf756597bc150ea88c8c9664a140143dde78f044149fb4ae0b732be5663c887a7e4f7f58
SSDEEP

6144:0tkuOScUYy6d6MNiyO3ST1eI6j2mlDwVxmyJBx9TMDf:3UYXTZAj2UDFyJB

Score

N/A

Malware Config

Signatures

Files

1a92aac41bcaf63276e1de6353c30b954e2edb4a6627aaa3e963488c98a44506
.dll windows x86

2399c640091cd7ac51b7d625fd730a65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA

oleaut32

SysStringLen
VariantTimeToSystemTime
VariantCopy
VarDecNeg
LoadTypeLibEx
OleLoadPictureFile
VarCyFromDec

kernel32

ExitProcess
ExpandEnvironmentStringsW
FindFirstVolumeMountPointW
GetBinaryTypeA
GetCommConfig
GetCommandLineA
GetCurrentProcessId
GetDateFormatA
GetFileSizeEx
GetLocaleInfoA
GetModuleHandleA
GetVersionExA
HeapAlloc
EnumDateFormatsExW
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
Module32FirstW
OpenEventA
PeekConsoleInputW
ReadFile
EnumDateFormatsExA
ReplaceFileW
SetFileAttributesW
VirtualProtectEx
lstrlenA
AddConsoleAliasW
HeapCreate

imm32

ImmGetGuideLineW
ImmUnregisterWordW
ImmSetStatusWindowPos
ImmReSizeIMCC
ImmEnumInputContext
ImmGetVirtualKey
ImmGetCompositionFontA

ole32

OleCreateLinkToFile
OleTranslateAccelerator
CoTaskMemRealloc
CoRegisterMallocSpy
CoGetClassVersion
StgCreateDocfile

ntdll

wcscpy
wcscspn
RtlInitString
RtlDestroyEnvironment

comctl32

PropertySheetA
CreatePropertySheetPageA

Exports

Exports

D3D10ResourceGetMappedPitch
DevelopLogPosToNormalPos
EnumRelCamSettingReset
GLUnregisterBufferObject
GetDevSplineArray
GetExtractJpegSize_ByModelName
GetIIMInfoCount
GetSplineArrayEx
GraphicsResourceGetMappedPointer
HostAlloc
Memcpy2DFromArray

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2399c640091cd7ac51b7d625fd730a65

Headers

File Characteristics

Imports

advapi32

oleaut32

kernel32

imm32

ole32

ntdll

comctl32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 72KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 72KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB