7232797cde28c3a9bbd83554de18b68eded7cbd49106e3bd2f72cba37e32218d

Sharing

Copy URL Twitter E-mail

General

Target

7232797cde28c3a9bbd83554de18b68eded7cbd49106e3bd2f72cba37e32218d
Size

540KB
MD5

5d48c2f70a635dc9ffad7675cf7be160
SHA1

e8d38067fe65160437df21ba3535d9006c070111
SHA256

7232797cde28c3a9bbd83554de18b68eded7cbd49106e3bd2f72cba37e32218d
SHA512

debfc2a6e8ed6159c2b643d5e574b6f0820837dc8183ca3aec25e1f53b7e9d4c82d8a68bd4a8931c91fee2f3badd33097c29de6a759deaeb633ddd1396802981
SSDEEP

6144:BqoKNUYsPPgGeKL8/nVclHGQeeaQeexQeesQeeiHQeehQee7k1ZUKVECCAORZQS/:EoKNUY4gG/K4mLUUC1tGOL9bmq

Score

N/A

Malware Config

Signatures

Files

7232797cde28c3a9bbd83554de18b68eded7cbd49106e3bd2f72cba37e32218d
.dll windows x86

35f2455ca376048ae99fd885f4fd7804

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
InitializeCriticalSection
GetProcessHeap
HeapFree
CloseHandle
CreateFileA
GetLastError
WriteFile
IsProcessorFeaturePresent
GetSystemInfo
OutputDebugStringA
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
LeaveCriticalSection
WriteConsoleW
GetTickCount
DeleteCriticalSection
HeapAlloc
EnterCriticalSection
GetCurrentThreadId
GetCommandLineA
RtlUnwind
InterlockedIncrement
InterlockedDecrement
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualQuery
LCMapStringA
LCMapStringW
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP

user32

LoadBitmapA

gdi32

MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
GetCharacterPlacementA
SelectObject
DeleteObject
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
ExtTextOutW

comdlg32

ChooseFontA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

Exports

Exports

_DllGetClassObject@12

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35f2455ca376048ae99fd885f4fd7804

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 202KB

.rdata Size: 108KB - Virtual size: 105KB

.data Size: 52KB - Virtual size: 67KB

.rsrc Size: 144KB - Virtual size: 142KB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 204KB - Virtual size: 202KB

.rdata
Size: 108KB - Virtual size: 105KB

.data
Size: 52KB - Virtual size: 67KB

.rsrc
Size: 144KB - Virtual size: 142KB

.reloc
Size: 28KB - Virtual size: 25KB