e3b445625be7f4650c657f6838a4d2e074ca0a00d7b2ad0660a03cea0e5b8a9d

General

Target

e3b445625be7f4650c657f6838a4d2e074ca0a00d7b2ad0660a03cea0e5b8a9d
Size

45KB
MD5

800785cb718f859950f4ed5f6b9de338
SHA1

c3751d1eeee031f5a29dda18385427e606f88907
SHA256

e3b445625be7f4650c657f6838a4d2e074ca0a00d7b2ad0660a03cea0e5b8a9d
SHA512

312b4399cbdd4e3b37620fd82b3aab082c59f9b460abe1f8690dbf475d7d5a4b73807e3e8214e724e0db3f7ce41e98a6470f819571f52dd2a2b279e40d459cae
SSDEEP

768:DPAqdZMsB9r5XYxHnfYxUKM/KFfxK02aKPu3rU5gZL15GpiLXmzwxrMTP:jAqbMa9r5o5fIUKMyFo02du3lZL15miA

Score

N/A

Malware Config

Signatures

Files

e3b445625be7f4650c657f6838a4d2e074ca0a00d7b2ad0660a03cea0e5b8a9d
.dll windows x86

235bf8e1d415fd98910ec2cf46b1b13b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetStartupInfoA
VirtualAlloc
InterlockedExchange
VirtualQuery
GetTickCount
LoadLibraryA
Sleep
SetLastError
IsDebuggerPresent
GetCurrentThreadId
GetProcessHeap
IsBadStringPtrA
IsBadWritePtr
VirtualProtect

user32

GetWindowInfo
GetWindow
GetTitleBarInfo
GetAncestor
CopyIcon
GetCursor
GetWindowContextHelpId
GetWindowRect
GetClientRect
IsCharUpperA
IsWindowVisible
GetWindowPlacement
IsChild
BlockInput
WindowFromDC
GetDC
GetWindowRgn
GetIconInfo

advapi32

IsValidSecurityDescriptor
AreAnyAccessesGranted
InitializeSecurityDescriptor
IsValidSid

msvcrt

_ltoa
srand
rand
ldiv
_adjust_fdiv
malloc
_initterm
free
memchr
_memccpy
_CIpow
_CIcosh
time
ldexp
frexp
_hypot
_pctype
_isctype
__mb_cur_max
__doserrno
div
_itoa
_CIfmod

gdi32

GetPixel
GetBkColor
GetStretchBltMode

ole32

CoGetCurrentProcess
CoRevertToSelf

shell32

ord66
ord680
ord64

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

235bf8e1d415fd98910ec2cf46b1b13b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

ole32

shell32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 66KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 66KB

.reloc
Size: 3KB - Virtual size: 2KB