76dfc4d031352d169945f9248f19aa3cd53610a5264637e1594d61149c447268

General

Target

76dfc4d031352d169945f9248f19aa3cd53610a5264637e1594d61149c447268
Size

136KB
MD5

9685cc3e2fb12d02f9ede0c32da20823
SHA1

77af8d5dba8f17d21cc4ed2a8beebbcc804b0aa4
SHA256

76dfc4d031352d169945f9248f19aa3cd53610a5264637e1594d61149c447268
SHA512

e6da1361f21b604426b225911559b1934ef951bd1cee0d84071cb8b5e8e0476b0e053389f2d9472afdf82aa69d6266bcf11e2a493626071c67592f8606e5dab6
SSDEEP

3072:TvQcwn2mXjJtiYCJTiaAW8T9F5aIUtKzr+FE2dGbLoNmu38:7NkZviYCJTiaAp5F5aIVsECNmus

Score

N/A

Malware Config

Signatures

Files

76dfc4d031352d169945f9248f19aa3cd53610a5264637e1594d61149c447268
.dll windows x86

7b944c6239aae8b8d40903aa60f527d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
CopyFileA
InterlockedDecrement
LoadLibraryA
ExitProcess
lstrlenW
SetLastError
UnmapViewOfFile
CreateEventA
LeaveCriticalSection
GetModuleHandleA
GetProcAddress
CreateDirectoryA
GetCommandLineA
GetModuleFileNameA
ReleaseMutex
Sleep
OpenEventA
GetTickCount
CreateProcessA
CloseHandle
GetLastError
LocalFree
InterlockedIncrement
lstrlenA
MapViewOfFile
InterlockedCompareExchange
WaitForSingleObject

ole32

OleSetContainedObject
CoUninitialize
CoInitialize
CreateBindCtx
CoCreateGuid
OleCreate

user32

DispatchMessageA
SendMessageA
GetMessageA
GetParent
DefWindowProcA
RegisterWindowMessageA
PostQuitMessage
SetWindowLongA
GetSystemMetrics
CreateWindowExA
TranslateMessage
SetTimer
PostMessageA
GetClassNameA
KillTimer
DestroyWindow
FindWindowA
GetWindowLongA

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shlwapi

StrStrIW
UrlUnescapeW

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

Exports

Exports

odbcWIMgmt

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b944c6239aae8b8d40903aa60f527d9

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB