051307ada4b7818a8149f205b3171d45e924d32178afdece319130c0937218cc

Sharing

Copy URL

Twitter E-mail

General

Target

051307ada4b7818a8149f205b3171d45e924d32178afdece319130c0937218cc
Size

141KB
MD5

5004599af546a573401d03cefdd41d8a
SHA1

43fd76be5a11d989bc71c4ee2b47ee2dad30c4db
SHA256

051307ada4b7818a8149f205b3171d45e924d32178afdece319130c0937218cc
SHA512

4b864eb425e05e374e34a523751ed8ff972d79f7dc730bc533046fae7b836c5805dd20017f36a50e3504748a4dceff60f947dbefe34cbd684496eb2abdc7a65c
SSDEEP

3072:BRyVSw+AJFHW2196jGxQ99cASa97Uxbff1YbMOTxNXSTldMqqDLy/ZN:GwMFHW8MFSFrsMeNXSwqqDLu

Score

N/A

Malware Config

Signatures

Files

051307ada4b7818a8149f205b3171d45e924d32178afdece319130c0937218cc
.dll windows x86

07330b95b12c468e731252db5e34e8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WideCharToMultiByte
InterlockedDecrement
lstrlenA
lstrlenW
CreateFileA
GetACP
SetFileTime
MultiByteToWideChar
RaiseException
VirtualAlloc
GetProcessHeap
Sleep
GetFileAttributesA
ExpandEnvironmentStringsA
InterlockedCompareExchange
MoveFileExA
GetCurrentDirectoryA
InterlockedExchange
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GlobalAlloc
FreeLibrary
GlobalFree
MulDiv
GlobalLock
GlobalUnlock
GetWindowsDirectoryW
LocalFree
SetCurrentDirectoryW
OutputDebugStringW
GetCommandLineA
DeleteFileA
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
RtlUnwind
GetVersionExA
VirtualQuery
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
WriteFile
GetSystemInfo

user32

InflateRect
SendMessageW
CopyRect
CharNextA
GetParent
PostMessageW
ReleaseCapture
OffsetRect
GetSysColor
GetClientRect

advapi32

RegQueryValueExW
RegSetValueW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyW

gdi32

CreateCompatibleDC
LPtoDP
GetDeviceCaps
GetEnhMetaFileBits
CreatePenIndirect
CreateFontIndirectW
GetViewportOrgEx
GetWindowOrgEx
Rectangle
EnumFontFamiliesW
GetTextMetricsW

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07330b95b12c468e731252db5e34e8b6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 59KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 59KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB