dc37d8ebfaac693a9b5b60accbb857a2b93172ecc7091d7518e8c13b06a836d0

General

Target

dc37d8ebfaac693a9b5b60accbb857a2b93172ecc7091d7518e8c13b06a836d0
Size

78KB
MD5

a1539f167a44679df0a504fc38bb1d70
SHA1

c1b536bd1c0b27b6b27c8e7d91b40be25519d424
SHA256

dc37d8ebfaac693a9b5b60accbb857a2b93172ecc7091d7518e8c13b06a836d0
SHA512

a8567a2e5bc0fe10c6799e6ae53ab9adb06e9ad64acfb526e2ba0de76ae32443285be14f969a7b68d47a926947b0d543a82ca0010fa3eabbb234c4e60b2841c7
SSDEEP

1536:P32tPAfMeJpavDH3s8se7xH/z+1Y/S1xwgvw49:PwPXOkDH81e7x/6QS1xe49

Score

N/A

Malware Config

Signatures

Files

dc37d8ebfaac693a9b5b60accbb857a2b93172ecc7091d7518e8c13b06a836d0
.dll windows x86

02ffa37b4c34e430de7be5b4dd7bb3bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetACP
DisconnectNamedPipe
WriteFile
ConnectNamedPipe
GetModuleHandleA
IsBadCodePtr
GetSystemInfo
FreeEnvironmentStringsW
InterlockedExchangeAdd
InitializeCriticalSection
InterlockedDecrement
VirtualProtect
SetEvent
HeapAlloc
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
WaitForSingleObject
IsBadReadPtr
SetUnhandledExceptionFilter
GetStdHandle
InterlockedExchange
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
DuplicateHandle
Sleep
LoadLibraryA
CreateEventA
CreateTimerQueueTimer
GetLastError
ResetEvent
CreateNamedPipeA
UnmapViewOfFile
LeaveCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
CreateMutexW
GetOEMCP
HeapDestroy
LCMapStringA
CreateThread
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteTimerQueueTimer
OpenProcess
RtlUnwind
SetLastError
WaitForMultipleObjects
HeapFree
InterlockedCompareExchange
UnhandledExceptionFilter
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
lstrcpyW
FreeEnvironmentStringsA
ExitThread
GetBinaryTypeA
GetFileType
GetTickCount
VirtualQuery

user32

DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

kustwmugq

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02ffa37b4c34e430de7be5b4dd7bb3bb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 48KB

.data Size: 17KB - Virtual size: 47KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 614B

.text
Size: 48KB - Virtual size: 48KB

.data
Size: 17KB - Virtual size: 47KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 614B