15abaa5aa20a3badeabef9b6c53eccfa1434ef2c960267d799e6aca2bf4da14e

Sharing

Copy URL Twitter E-mail

General

Target

15abaa5aa20a3badeabef9b6c53eccfa1434ef2c960267d799e6aca2bf4da14e
Size

136KB
MD5

29cdf3c3dd96661db0405aa9e0fc7800
SHA1

0e683e6e1895b417cd17ed0dc5ae455615dee44d
SHA256

15abaa5aa20a3badeabef9b6c53eccfa1434ef2c960267d799e6aca2bf4da14e
SHA512

234b93daae741279d55cc355346ed3f88725128a418ab4d34c4ac16c9656415221ca07ffdc22bdcc3f67c0fb3271a1603d46337d4549637c3e19b8734beffd46
SSDEEP

3072:v5LrDjUF6J4Ivi2TTOTJVnGEo9Mu7PVqjgYoGh2YqlXPQcgYh4mGCpXVsk:hnDjUYJ4Ivi2TTcTnQ79qeYYocwxs+k

Score

N/A

Malware Config

Signatures

Files

15abaa5aa20a3badeabef9b6c53eccfa1434ef2c960267d799e6aca2bf4da14e
.dll windows x86

ee169d0dc94b070e30222614bdad5c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
UnmapViewOfFile
EnterCriticalSection
MapViewOfFile
GetLastError
CreateFileMappingA
FreeEnvironmentStringsA
GetModuleFileNameA
HeapAlloc
HeapFree
RtlUnwind
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetACP
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
MultiByteToWideChar
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

user32

CreateDialogParamA
PostMessageA
DestroyWindow
IsWindow
GetWindowLongA
GetParent
RegisterWindowMessageA
SendMessageA

Exports

Exports

Windows_run
addAccessibleSelectionFromContext
clearAccessibleSelectionFromContext
getAccessibleChildFromContext
getAccessibleContextAt
getAccessibleContextFromHWND
getAccessibleContextInfo
getAccessibleContextWithFocus
getAccessibleParentFromContext
getAccessibleRelationSet
getAccessibleSelectionCountFromContext
getAccessibleSelectionFromContext
getAccessibleTableCellInfo
getAccessibleTableColumn
getAccessibleTableColumnDescription
getAccessibleTableColumnHeader
getAccessibleTableColumnSelectionCount
getAccessibleTableColumnSelections
getAccessibleTableIndex
getAccessibleTableInfo
getAccessibleTableRow
getAccessibleTableRowDescription
getAccessibleTableRowHeader
getAccessibleTableRowSelectionCount
getAccessibleTableRowSelections
getAccessibleTextAttributes
getAccessibleTextInfo
getAccessibleTextItems
getAccessibleTextLineBounds
getAccessibleTextRange
getAccessibleTextRect
getAccessibleTextSelectionInfo
getCurrentAccessibleValueFromContext
getMaximumAccessibleValueFromContext
getMinimumAccessibleValueFromContext
getVersionInfo
isAccessibleChildSelectedFromContext
isAccessibleTableColumnSelected
isAccessibleTableRowSelected
isJavaWindow
releaseJavaObject
removeAccessibleSelectionFromContext
selectAllAccessibleSelectionFromContext
setCaretUpdateFP
setFocusGainedFP
setFocusLostFP
setMenuCanceledFP
setMenuDeselectedFP
setMenuSelectedFP
setMouseClickedFP
setMouseEnteredFP
setMouseExitedFP
setMousePressedFP
setMouseReleasedFP
setPopupMenuCanceledFP
setPopupMenuWillBecomeInvisibleFP
setPopupMenuWillBecomeVisibleFP
setPropertyActiveDescendentChangeFP
setPropertyCaretChangeFP
setPropertyChangeFP
setPropertyChildChangeFP
setPropertyDescriptionChangeFP
setPropertyNameChangeFP
setPropertySelectionChangeFP
setPropertyStateChangeFP
setPropertyTableModelChangeFP
setPropertyTextChangeFP
setPropertyValueChangeFP
setPropertyVisibleDataChangeFP

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee169d0dc94b070e30222614bdad5c1f

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 4KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 4KB

.rmnet
Size: 60KB - Virtual size: 60KB