1bbdb2a034e8c1f93d2e572dff8c1dee0226fa72693bec71f0854853df1faea9

Sharing

Copy URL Twitter E-mail

General

Target

1bbdb2a034e8c1f93d2e572dff8c1dee0226fa72693bec71f0854853df1faea9
Size

184KB
MD5

65a89e1f924984d6feff37b1d8a7dfdb
SHA1

d54cacb8e15c396f82202d46f2540dce4160e031
SHA256

1bbdb2a034e8c1f93d2e572dff8c1dee0226fa72693bec71f0854853df1faea9
SHA512

82ed994dc5d6e3f3544638bb49c5755e4b05a9f2229d3e33b5624958af8b34f8c1147444846ca2199bcdc4a27a8d3e69c7dd040849d9418224fadce407c3d70f
SSDEEP

3072:zPHlfsBkxvW4+w0ox1ZwVfUkiEUjfJSKdCsJ7g8dj4ywYbJhCqZl9Bln5I1LDsdw:jHlf7T1d8sj4yRVB35IZcw

Score

N/A

Malware Config

Signatures

Files

1bbdb2a034e8c1f93d2e572dff8c1dee0226fa72693bec71f0854853df1faea9
.dll windows x86

45a936399add008d1ea5ec383f34dd6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetProcessHeap
CreateFileA
LocalFree
LocalAlloc
MultiByteToWideChar
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
WideCharToMultiByte
GetLocalTime
GlobalLock
LoadLibraryW
CloseHandle
SetEvent
ResetEvent
InterlockedDecrement
CreateThread
Sleep
ReleaseMutex
WaitForSingleObject
UnregisterWaitEx
CancelWaitableTimer
SetWaitableTimer
CreateEventA
ResumeThread
CreateWaitableTimerW
LoadLibraryA
GetProcAddress
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
DuplicateHandle
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
GetEnvironmentStringsW
GetLastError
RtlUnwind
GetVersionExA
VirtualQuery
ExitProcess
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetSystemInfo

user32

DispatchMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
PeekMessageW
PostThreadMessageW

advapi32

RegQueryValueExA
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegCloseKey
RegOpenKeyExA
CloseServiceHandle

ole32

CoTaskMemFree

rpcrt4

NdrClientCall2
RpcBindingFree
RpcStringFreeA
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcRaiseException
UuidCreate

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45a936399add008d1ea5ec383f34dd6c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 38KB

.rsrc Size: 28KB - Virtual size: 25KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 38KB

.rsrc
Size: 28KB - Virtual size: 25KB

.reloc
Size: 8KB - Virtual size: 5KB