30d0bf37c3c1dabd3ac305af84a4f6fd34574b841f55ddc8961b04655efc95a4

General

Target

30d0bf37c3c1dabd3ac305af84a4f6fd34574b841f55ddc8961b04655efc95a4
Size

564KB
MD5

90b3071f3340205addca778fb3de2324
SHA1

171a15596d76143c536965addf847b70f14aaf4f
SHA256

30d0bf37c3c1dabd3ac305af84a4f6fd34574b841f55ddc8961b04655efc95a4
SHA512

d75fd469f5cff65c2daef042f96d4fbed3847f4429022e581a27e1a7fa8205b44622498b64e59df0e60f2f4349ca697f03a9da7ab4fcf1ef129274f7143e8b50
SSDEEP

12288:PaLD5B6lSym4a84KGJik5bZlUH3Tdw21zfp48:Pc1w41JiLH3T1

Score

N/A

Malware Config

Signatures

Files

30d0bf37c3c1dabd3ac305af84a4f6fd34574b841f55ddc8961b04655efc95a4
.dll windows x86

dc3fe3412128e1170d84dc3caade2e59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
GetProcessHeap
FreeLibrary
HeapAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
IsBadWritePtr
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
InitializeCriticalSection
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetSystemInfo

user32

SetWindowsHookExA

Exports

Exports

Command
Install
Main
Opt
Service
SetProc
Uninstall

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc3fe3412128e1170d84dc3caade2e59

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 512KB - Virtual size: 508KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512KB - Virtual size: 508KB

.reloc
Size: 8KB - Virtual size: 4KB