2b959bf862d9fbe941e979007f317ac1dba4f8af962aadfc2f1b451792784337

General

Target

2b959bf862d9fbe941e979007f317ac1dba4f8af962aadfc2f1b451792784337
Size

308KB
MD5

00730544f0f9202fa7d10d9c4f21a360
SHA1

2178442bc2ac04b4256515085ee1aef420ddfac4
SHA256

2b959bf862d9fbe941e979007f317ac1dba4f8af962aadfc2f1b451792784337
SHA512

9f07237dc41f91cbf01de47a7c2869bdf3c49fe6267645c9a43f87d21cd69387dfad574a1cfdf3a3f94fcbe8f6730347a6f540fdc727e24a3707da160f34dad8
SSDEEP

6144:yriT2hMLaWJLmxR62jWkhnMvcUKL39AmcxOWlsuoi2vX:3LaYWRKklocUY32xbyzX

Score

N/A

Malware Config

Signatures

Files

2b959bf862d9fbe941e979007f317ac1dba4f8af962aadfc2f1b451792784337
.dll windows x86

a12cbb37e58018ca16e377689f7aa2bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
CloseHandle
CreateFileA
SetFilePointer
GetFileSize
lstrlenA
GetModuleFileNameA
lstrcatA
lstrcpyA
SetHandleCount
GetStdHandle
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
ReadFile
SetLastError
TlsGetValue
GetLastError
GetACP
GetCPInfo
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

user32

MessageBoxA

Exports

Exports

CorrectEnglishWord
EngSetCharSet
EngSpellChecker
FreeEnglishLibrary
GetCutPosition
LoadEnglishLibrary
PCARecSingleChar
RecogConnectEng
RecogEnglishWord
RecogSingleEng
RegionLabel
pRecogConnectEng

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a12cbb37e58018ca16e377689f7aa2bf

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 311KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 311KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 188KB - Virtual size: 188KB