0baa693f864d7bd6ebd17c0795e5b546a4e98451b91a205d4bec6a8573bb4acf

Sharing

Copy URL Twitter E-mail

General

Target

0baa693f864d7bd6ebd17c0795e5b546a4e98451b91a205d4bec6a8573bb4acf
Size

256KB
MD5

69b6272c00622bd292a890f620650474
SHA1

ab43a76725efe8c23e13478dbebb396cfe7bef55
SHA256

0baa693f864d7bd6ebd17c0795e5b546a4e98451b91a205d4bec6a8573bb4acf
SHA512

5a510a5a59749a8afc42ccaa7941d7125c7b91fa470bc28493edd30f5c797ea021410eca3f6997a3f830086e7accdcb78eea0884c4224a2b601e366fc941e551
SSDEEP

3072:9uU66zk1o4NmCdfTG3fiGdrGcfs3KhZzZt4zT7RyT9xYjpDrD/yZt+cNNUcnOAcX:o1zNDfTsfN7038yyTnYjp7yEcNlOA

Score

N/A

Malware Config

Signatures

Files

0baa693f864d7bd6ebd17c0795e5b546a4e98451b91a205d4bec6a8573bb4acf
.dll windows x86

debf0c32c2a4b1f2846a32d52c52e076

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
SetFilePointer
GetSystemDirectoryA
GetModuleHandleA
GetVersion
FlushFileBuffers
GetVersionExA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetCurrentProcess
FindClose
FindNextFileA
FindFirstFileA
GetTickCount
CompareStringW
HeapCreate
LeaveCriticalSection
SetStdHandle
IsBadCodePtr
VirtualAlloc
VirtualFree
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
ExitProcess
SetEnvironmentVariableA
SetLastError
TlsFree
TlsAlloc
GetCommandLineA
MoveFileA
RaiseException
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitThread
HeapFree
HeapAlloc
OutputDebugStringA
GetCurrentProcessId
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
IsBadReadPtr
IsBadWritePtr
lstrlenA
InterlockedDecrement
DeleteFileA
CopyFileA
SetFileTime
ReadFile
GetTempPathA
GetTempFileNameA
GetFileTime
WriteFile
CreateFileA
GetFileSize
GetFileInformationByHandle
GetCurrentThreadId
CompareStringA
EnterCriticalSection
TlsGetValue
TlsSetValue
CreateThread
DeleteCriticalSection
InitializeCriticalSection
GetDiskFreeSpaceA
GetLastError
SetEvent
InterlockedIncrement
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
ResumeThread
WaitForSingleObject
CloseHandle

user32

IsWindow
SetWindowLongA
PostMessageA
UnregisterClassA
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
SetCursor
KillTimer
GetCursorPos
wsprintfA
GetWindowLongA
DefWindowProcA
RegisterClassA
CreateWindowExA

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

Exports

Exports

GetComputerInfo9x
GetUserInfo9x
IAlloc

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

debf0c32c2a4b1f2846a32d52c52e076

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 180KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 32KB - Virtual size: 31KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 180KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 32KB - Virtual size: 31KB

.reloc
Size: 8KB - Virtual size: 7KB