81943909d92d5522f921dff14e7f422dbd25be7f93523b096914fd91c33c7cf8

General

Target

81943909d92d5522f921dff14e7f422dbd25be7f93523b096914fd91c33c7cf8
Size

160KB
MD5

35f16ec8cfe67fdd8f3a7d1ebaeaed90
SHA1

a0dcc5458f06e4dd11b1449f840c0143c6fd3b22
SHA256

81943909d92d5522f921dff14e7f422dbd25be7f93523b096914fd91c33c7cf8
SHA512

33a6878aa161d8a46af93098693cafc9b1a16b872bf5420ab2347ee0223c509571133b7ee4e17db777b1ef2f29e8885e148ed662f9e513e416b26c897f9af69f
SSDEEP

3072:4hqKsvvf4DzDWzVelaKdjOkfL6oBSjNC1oNHH9xb0GW4vyNO5BwqL7iX:/zf4DiehjXDsjNT9MGW3NUH/q

Score

N/A

Malware Config

Signatures

Files

81943909d92d5522f921dff14e7f422dbd25be7f93523b096914fd91c33c7cf8
.dll windows x86

6fbfd5a386d4142aa5559aae0e701121

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
Sleep
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetModuleFileNameA
GetComputerNameA
GetCurrentProcess
GetLocalTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
GetTickCount
GetProcAddress
GetCurrentThreadId
IsBadStringPtrA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
GetSystemTimeAsFileTime

user32

IsChild
GetDesktopWindow
GetGUIThreadInfo
IsIconic
IsZoomed
GetCursor
IsWindowUnicode
GetWindowTextLengthA
IsCharLowerA
IsCharUpperA
SetLastErrorEx
InSendMessage
CopyIcon
WindowFromDC
GetWindowRgn
IsCharAlphaA
GetWindow

advapi32

InitializeSecurityDescriptor
IsValidAcl
IsValidSecurityDescriptor
IsValidSid

msvcrt

_set_error_mode
_ultoa
srand
ldiv
_itoa
_adjust_fdiv
malloc
_initterm
free
memchr
_swab
_CItanh
_CIsinh
time
_hypot
_pctype
_isctype
ldexp
frexp
modf
__mb_cur_max
__doserrno
_CIcosh

gdi32

GetBitmapDimensionEx

ole32

CoGetCurrentProcess
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf

shell32

ord680
DuplicateIcon
ord66
ord64

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fbfd5a386d4142aa5559aae0e701121

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

ole32

shell32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 66KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 66KB

.reloc
Size: 3KB - Virtual size: 2KB