fe31c6d0b0446544f0a61535e37e36d915d4b8403da029f598bf1f910133c13c

Sharing

Copy URL Twitter E-mail

General

Target

fe31c6d0b0446544f0a61535e37e36d915d4b8403da029f598bf1f910133c13c
Size

684KB
MD5

6e4c7b2f06fa3946a17a9883cdcffb00
SHA1

e73cb9509daaeb61e5a6b8b3a72a100e1bd4282f
SHA256

fe31c6d0b0446544f0a61535e37e36d915d4b8403da029f598bf1f910133c13c
SHA512

0ba51412ff3dd6283acdb62519d21e72508d8a381654db6530798a291781fe4fdba173f046eec86fec634b754fda40bf02091aa58ebb4305ba2ccfafb3acc2f2
SSDEEP

6144:FY+gWmIVNL7L9DzX7T58Fv6xi+ySqCtR0JWIA+thKbNUyjEUznaiFV92tnXPAhso:gWNpzeZ6nvqkkhBy4ix2xXPpeG99zlc

Score

N/A

Malware Config

Signatures

Files

fe31c6d0b0446544f0a61535e37e36d915d4b8403da029f598bf1f910133c13c
.dll windows x86

de21b1c16bc0f141f0216ae161bec674

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
OleCreateFromFile
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CoInitialize
CoCreateInstance

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey

oleaut32

VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi

kernel32

TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrcmpiW
lstrlenW
GetModuleHandleW
Sleep
SetWaitableTimer
SetUnhandledExceptionFilter
SetEvent
ResetEvent
ReleaseMutex
ReadFile
RaiseException
CancelWaitableTimer
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
CreateThread
CreateWaitableTimerW
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FindResourceW
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetExitCodeThread
GetLastError
GetModuleFileNameW
GetModuleHandleA
QueryPerformanceCounter
GetOverlappedResult
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
MultiByteToWideChar
OutputDebugStringA

setupapi

CM_Delete_Class_Key
CM_Delete_DevNode_Key
CM_Get_Parent
CM_Get_Sibling
CM_Locate_DevNodeW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
CM_Add_Empty_Log_Conf_Ex

Exports

Exports

ClearFreeList
InteractLoop
List_Size
Warning
ZeroDivisiError
set_convert_mono
set_hIST
vInitA

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de21b1c16bc0f141f0216ae161bec674

Headers

File Characteristics

Imports

ole32

advapi32

oleaut32

kernel32

setupapi

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 181KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 252KB - Virtual size: 252KB

.rsrc Size: 164KB - Virtual size: 162KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 184KB - Virtual size: 181KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 252KB - Virtual size: 252KB

.rsrc
Size: 164KB - Virtual size: 162KB

.reloc
Size: 12KB - Virtual size: 10KB