0d6c61fcc6ab8c49a20015ebdd993f646f5aecd6a89a255a2e828105a9eaa211

General

Target

0d6c61fcc6ab8c49a20015ebdd993f646f5aecd6a89a255a2e828105a9eaa211
Size

124KB
MD5

6ac69a5a8be35c042f5bca88ad03d9cf
SHA1

b0f6e5530a3bcc242bae543ea1edb1ba9b42aa56
SHA256

0d6c61fcc6ab8c49a20015ebdd993f646f5aecd6a89a255a2e828105a9eaa211
SHA512

976e4bb46cf0bced392cd805feee33e1e11d107744ecb7ab8915f54e0f559d9b764e878b81a3226fdf1bbea8ebc61cc05fa264ef60cc39b88148665cee4cebd2
SSDEEP

3072:sOSj4KHQ3uoa81ZYXhQ8ebnZ3nnd6GON/:/hw816Qd3YGO

Score

N/A

Malware Config

Signatures

Files

0d6c61fcc6ab8c49a20015ebdd993f646f5aecd6a89a255a2e828105a9eaa211
.dll windows x86

28a3b23c1aed0bfb2e8469224168c7e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
Sleep
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
FormatMessageW
GetProcAddress
LoadLibraryW
InterlockedIncrement
TerminateProcess
InterlockedExchange
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
VirtualProtect
InterlockedDecrement
GetCommandLineA
HeapReAlloc
VirtualAlloc
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
GetStringTypeW

user32

SetDlgItemTextW
LoadStringW
MessageBoxW
DestroyCursor
LoadCursorW
SetCursor
GetWindowLongW
SetWindowLongW

advapi32

LsaQueryInformationPolicy
LsaClose

ole32

ReleaseStgMedium

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a3b23c1aed0bfb2e8469224168c7e1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 44KB - Virtual size: 77KB

.rsrc Size: 40KB - Virtual size: 38KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 44KB - Virtual size: 77KB

.rsrc
Size: 40KB - Virtual size: 38KB

.reloc
Size: 4KB - Virtual size: 1KB