d11a79014dd3a8c1b7792b313c703ca4776a7cd31803ca9ae8abaf77a16b657c

Sharing

Copy URL Twitter E-mail

General

Target

d11a79014dd3a8c1b7792b313c703ca4776a7cd31803ca9ae8abaf77a16b657c
Size

112KB
MD5

a08d7c9b56a776330039e2b1f63441c0
SHA1

0080df4b2bc600bb9a33cc91ec2921b838969e08
SHA256

d11a79014dd3a8c1b7792b313c703ca4776a7cd31803ca9ae8abaf77a16b657c
SHA512

f8442c1b0a4996ae5cfcce1068ea762c52019562dd026da48f608676518e595178cf776cc1fdce4d203bea8771b6aa3ab5fcf19a06c3777827d811aaed114d59
SSDEEP

1536:qpltX0fMxbO5FHUvNkdRr1/hCPThYusK2BQQBvoL/ARVhgRf0AVZmMwMgx:5KqHkMTCrCIKskDgRMAVZmMwZx

Score

N/A

Malware Config

Signatures

Files

d11a79014dd3a8c1b7792b313c703ca4776a7cd31803ca9ae8abaf77a16b657c
.dll windows x86

2c56f22611c541f65dfe3def8c4c2378

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
InterlockedExchange
DeleteCriticalSection
HeapFree
SetLastError
GetLastError
ReleaseMutex
InterlockedDecrement
WritePrivateProfileStringW
HeapAlloc
lstrlenW
lstrcpyW
lstrcmpiW
CloseHandle
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GlobalUnlock
lstrcpynW
lstrlenA
FormatMessageW
InterlockedIncrement
InitializeCriticalSection
GetModuleFileNameA
lstrcatA
lstrcpyA
CreateFileA
LocalFree
CreateMutexA
lstrcmpiA
GetVersionExA
MultiByteToWideChar
GetSystemDirectoryA
WideCharToMultiByte
SetFilePointer
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpA
CreateFileW
CopyFileA
CopyFileW
CreateDirectoryA
CreateDirectoryW
InterlockedCompareExchange
SystemTimeToFileTime
RaiseException
LoadLibraryW
GetSystemTimeAsFileTime
CompareFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpW
Sleep
LockResource
LoadResource
FindResourceW
ResetEvent
SetEvent
GlobalHandle
MoveFileW
_lclose
GetModuleFileNameW
GetProcessHeap
GetProcAddress
ReleaseSemaphore
GlobalFree
GetCommandLineA
GlobalAlloc
CreateMutexW
VirtualProtect

user32

UnregisterClassA
CharNextW
CharNextA
wsprintfA
LoadStringW
LoadStringA
wsprintfW
SendMessageTimeoutW
PostQuitMessage
UnregisterDeviceNotification
DestroyWindow

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExW
FreeSid
RegCreateKeyW
RegDeleteValueW
CryptAcquireContextW
CryptGetUserKey
CryptDestroyKey
CryptReleaseContext
RegOpenCurrentUser
RegEnumKeyExW
RegSetValueExW
TraceMessage
RegQueryInfoKeyW
RegOpenKeyExW
RegisterTraceGuidsW
RegQueryValueExA

ole32

CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
StringFromCLSID

rpcrt4

RpcBindingFromStringBindingW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcBindingSetAuthInfoW

msvcr71

wcslen
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
wcschr
_vsnwprintf
_wcsnicmp
wcstoul
memset
_ultow
memcpy
_XcptFilter
_amsg_exit
wcscmp
_wcsicmp
qsort
wcstol
wcscat
wcsrchr
_adjust_fdiv
_initterm
free
_except_handler3
wcscpy
malloc

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c56f22611c541f65dfe3def8c4c2378

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

rpcrt4

msvcr71

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB