0c239d1c26200f6d44ab06175d5eb01da7d15a5b98cc977ebc19dbc51882d9e1

General

Target

0c239d1c26200f6d44ab06175d5eb01da7d15a5b98cc977ebc19dbc51882d9e1
Size

162KB
MD5

a21f69d1f21a480697f5d9480ba7f735
SHA1

1ee1899495b73dd771c3d42418bc0c1e8c79992c
SHA256

0c239d1c26200f6d44ab06175d5eb01da7d15a5b98cc977ebc19dbc51882d9e1
SHA512

7a76ae5e155acd1ce494d6f2330bcfc45095ca2b3324bf5c8a6e07e4ff34c129bffd3f80dd3152a92dfefa543381e7dbadd357350ce53b2aedb3ad67bbf1b30b
SSDEEP

3072:dIgMpyuV14EPg972xVwe2yPfWJW9RzQbN/c404cpV1leDWSKxeBSViG3ZlZ90:xMQeI8h2ymJE8A4cpVyDWSQVi6Zl30

Score

N/A

Malware Config

Signatures

Files

0c239d1c26200f6d44ab06175d5eb01da7d15a5b98cc977ebc19dbc51882d9e1
.dll windows x86

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetProcAddress
GetACP
GetUserDefaultLCID
GetLocalTime
VirtualAlloc
VirtualProtect
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
GetLastError
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcess
IsBadStringPtrA
IsBadCodePtr
GetStartupInfoA

user32

GetCursor
GetWindowContextHelpId
GetWindowTextLengthA
IsCharAlphaNumericA
IsCharAlphaA
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
CopyIcon
GetWindow
GetWindowInfo
IsZoomed
IsIconic
GetDesktopWindow
IsMenu
GetClientRect

advapi32

RevertToSelf
IsValidSid
AreAnyAccessesGranted
IsValidAcl
InitializeSecurityDescriptor

msvcrt

_initterm
free
_memicmp
__doserrno
_ultoa
srand
rand
malloc
_adjust_fdiv
__mb_cur_max
modf
_hypot
localeconv
_pctype
_isctype
_ltoa

gdi32

GetBkMode
GdiFlush
GdiGetBatchLimit
GetStretchBltMode

shell32

ord680

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2bde6ce955326a0fc448449a2c555155

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.reloc
Size: 3KB - Virtual size: 2KB