42baddd8556e3e7cd09c1c08b655d0f446d276e7eef4e02ced0df5995ceea745

Sharing

Copy URL Twitter E-mail

General

Target

42baddd8556e3e7cd09c1c08b655d0f446d276e7eef4e02ced0df5995ceea745
Size

431KB
MD5

1e352cc6be3febfaaf092463ae984034
SHA1

cab2013319006a9344814777d2db668490b8a1e6
SHA256

42baddd8556e3e7cd09c1c08b655d0f446d276e7eef4e02ced0df5995ceea745
SHA512

8f73c07d5fb4453dbc7c6b3b0b6e2fa8255dfb44fe208f76b374d1bc4133070211fa771fb6252f537587c168dbb111884147c4ba05d9f7c52ecc04e2ca471cac
SSDEEP

6144:3rljUx2ZiAQ/NofNxboQpUUgVpN9wDg3P5LWZvIYagXLfEZANETO3SS4kwj:3h4x2wNqoQQ/9+IYxzEC2SLE

Score

N/A

Malware Config

Signatures

Files

42baddd8556e3e7cd09c1c08b655d0f446d276e7eef4e02ced0df5995ceea745
.dll windows x86

06114c30930692a4b96726e2e71bb28a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CreateStreamOnHGlobal

kernel32

GetModuleHandleA
GetProcessAffinityMask
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalDeleteAtom
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
GetMailslotInfo
ReadFile
RegisterWaitForSingleObject
ReleaseMutex
RtlUnwind
SetThreadContext
SetupComm
SizeofResource
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualLock
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteTapemark
GetLastError
GetFullPathNameW
GetExitCodeProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetCommConfig
FreeResource
FreeLibrary
FlushFileBuffers
FindResourceA
ExitProcess
EnterCriticalSection
CreateThread
CreateMutexA
CreateFileA
CloseHandle
QueryPerformanceCounter

dinput

DirectInputCreateA

msvcrt

iswspace
log10
malloc
qsort
sqrt
tolower
free
_vsnprintf
_unlock
_stricmp
_j0
_finite
_eof
_amsg_exit
__p__winver
__dllonexit
__RTDynamicCast
__CxxLongjmpUnwind
_XcptFilter
_CxxThrowException
_CIsqrt
_CIasin
_CIacos

gdi32

ExtTextOutW
GdiGetBatchLimit
GetObjectA
ExtTextOutA
GetTextMetricsW
SelectObject
SetTextAlign
DeleteDC
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
GetTextMetricsA
CloseFigure

advapi32

RegQueryValueExA
CloseTrace
RegEnumKeyExA
LsaEnumerateTrustedDomains

Exports

Exports

ClearFreeList
GetItem
ImportError
List_SetItem
SetAttr
String_Format
_GetSlice
set_rows

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06114c30930692a4b96726e2e71bb28a

Headers

File Characteristics

Imports

ole32

kernel32

dinput

msvcrt

gdi32

advapi32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 253KB - Virtual size: 253KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 253KB - Virtual size: 253KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 3KB