63679553abcabff5a021105f4d032915bd1128078cd166a30c1dd28933aed46c

General

Target

63679553abcabff5a021105f4d032915bd1128078cd166a30c1dd28933aed46c
Size

100KB
MD5

462bbff1adea513c44a25d024402c468
SHA1

5f88119c7b365f360510842731dc33b83940b084
SHA256

63679553abcabff5a021105f4d032915bd1128078cd166a30c1dd28933aed46c
SHA512

97d040808d41aaf2bd120d31032a61d798383b9e4d196cc0e7af72632891188890d717f8594d6ee7f7a86022581899ca216f3b285d5d62307bb381ec3db4ddcd
SSDEEP

1536:DGQtCE5vEiBPNsPBqkYwSJwNEIdfZktm1jkPlGvcAG4L:7CEFVBuPBScdfLjkPZ4

Score

N/A

Malware Config

Signatures

Files

63679553abcabff5a021105f4d032915bd1128078cd166a30c1dd28933aed46c
.dll windows x86

00742d938a9643380fc61e962c2f5946

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
LocalFree
GetModuleFileNameW
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
lstrlenW
GetPrivateProfileStringA
lstrlenA
CloseHandle
WritePrivateProfileStringA
GetProcessHeap
WriteFile
SetFilePointer
FormatMessageW
SetEndOfFile
GetCurrentProcess
TlsFree
DisableThreadLibraryCalls
TlsAlloc
GetVersionExA
lstrcpyA
lstrcatA
GetStringTypeExA
IsDBCSLeadByte
TlsSetValue
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeLibrary
SizeofResource
LoadResource
FindResourceW
GetModuleHandleW
InterlockedExchange
Sleep
InterlockedCompareExchange
OutputDebugStringA
GetCommandLineA
FlushFileBuffers
VirtualProtect

user32

wsprintfA
CharPrevA
CharUpperA
LoadStringW
CharNextW
CharNextA
EnumChildWindows
GetSystemMetrics

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
FreeSid
RegDeleteValueW

ole32

CLSIDFromString
CoCreateInstance

msvcrt

_except_handler3
_initterm
malloc
free
memcpy
memset
_errno
_lock
_adjust_fdiv
_unlock
__dllonexit

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00742d938a9643380fc61e962c2f5946

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcrt

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 36KB - Virtual size: 68KB

.rsrc Size: 16KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 36KB - Virtual size: 68KB

.rsrc
Size: 16KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 1KB