0a6bfe739fa66d12bacdffb1a54906eb1f01d01bdbb56c2e1c14f646a7da1dd2

Sharing

Copy URL

Twitter E-mail

General

Target

0a6bfe739fa66d12bacdffb1a54906eb1f01d01bdbb56c2e1c14f646a7da1dd2
Size

178KB
MD5

81924a8a9cf4e363d9147203e3f3e5b5
SHA1

bb8bd3067dd2dab14ed33e8f2051859763037b51
SHA256

0a6bfe739fa66d12bacdffb1a54906eb1f01d01bdbb56c2e1c14f646a7da1dd2
SHA512

f8033d3e511a4018be7b45473a9589958597fc6f7d7d372fa5b867172ac241145a6463e34b6111d565d80c4fa14d78e0a510cf59f655a9764a177e216af752ce
SSDEEP

3072:vLnqyD70+Lk3QRpWhRfOqFYH6mRcyTcKlSoPrbtiJJvj:Dnq070+Q3QRp+1tFyTZlSmI

Score

N/A

Malware Config

Signatures

Files

0a6bfe739fa66d12bacdffb1a54906eb1f01d01bdbb56c2e1c14f646a7da1dd2
.dll windows x86

c33bfea15e5bd347e9bf352be86f689b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
FileTimeToLocalFileTime
GetACP
GetCPInfo
GetCommandLineA
GetFileAttributesA
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTimeZoneInformation
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedExchange
InterlockedIncrement
MultiByteToWideChar
RaiseException
ReadProcessMemory
ResetEvent
RtlUnwind
SetEnvironmentVariableA
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
WaitForSingleObject
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW

user32

CheckMenuItem
CreateMenu
DrawFrameControl
MsgWaitForMultipleObjects
GetSystemMetrics
GetMenuItemCount
EnumChildWindows

winmm

joyGetPos
joyConfigChanged
joyGetDevCapsA

ole32

CoTaskMemFree
CoCreateInstance
CoBuildVersion

advapi32

GetNumberOfEventLogRecords
LookupPrivilegeDisplayNameA
LookupSecurityDescriptorPartsW
LsaQueryInfoTrustedDomain
EnumDependentServicesW
RegQueryInfoKeyA
RemoveTraceCallback
SetEntriesInAclA
EncryptFileA
CryptSetProviderExA
CryptCreateHash
CloseEncryptedFileRaw
RegDeleteValueA

shlwapi

StrTrimA
StrToIntA
StrStrW
SHRegGetPathA

oleaut32

VarBstrCmp
VarBstrCat
SysStringLen
SysReAllocString
SetErrorInfo
SafeArrayDestroy
SafeArrayCreate
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
RegisterTypeLi
OleIconToCursor
GetErrorInfo
ClearCustData

Exports

Exports

EnumRelCamSettingNext
GetCDInfo
MemcpyFromArray

Sections

.text
Size: 116KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c33bfea15e5bd347e9bf352be86f689b

Headers

File Characteristics

Imports

kernel32

user32

winmm

ole32

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 212KB

.data Size: 58KB - Virtual size: 60KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 116KB - Virtual size: 212KB

.data
Size: 58KB - Virtual size: 60KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB