858e7eed1ec7738eb64b7da27173e8a4b5d91de73991ee7985a4c466d028949f

Sharing

Copy URL Twitter E-mail

General

Target

858e7eed1ec7738eb64b7da27173e8a4b5d91de73991ee7985a4c466d028949f
Size

288KB
MD5

96e76ad097dfafaaf66deb81de0aa444
SHA1

36d2a7fdb45692198fdf0a086cacd8fc10be6edd
SHA256

858e7eed1ec7738eb64b7da27173e8a4b5d91de73991ee7985a4c466d028949f
SHA512

762e87265c1ff3f839116dec0ed677a66f0cf4f7231fd5ddd26d8f86cf8e7f99d95ea8d831fefb4350ca559bb1e7f21bbbd25faea07a160ecbff4adce8175611
SSDEEP

6144:Lfc7YveZyg2D4/EGpVDkGREVxqVSabCm+YdgcXbs0unr:Lf0YveZyg2D4/EG3DkGqVxqVSaD+YucO

Score

N/A

Malware Config

Signatures

Files

858e7eed1ec7738eb64b7da27173e8a4b5d91de73991ee7985a4c466d028949f
.dll windows x86

4df88836a7fbe23dd3fc507ff49bb95f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeWritePtr
CloseHandle
WriteFile
SetFilePointer
GetLastError
CreateFileW
ExpandEnvironmentStringsW
EnumUILanguagesA
GetProcAddress
LoadLibraryA
WriteConsoleInputA
GetNumaAvailableMemoryNode
GetOverlappedResult
IsDBCSLeadByte
WritePrivateProfileSectionW
SleepEx
EnumSystemLocalesA
LocalSize
GlobalAlloc
DebugActiveProcessStop
ReadProcessMemory
FindClose
GlobalGetAtomNameW
ReadDirectoryChangesW
WritePrivateProfileStructW
FindAtomW
GetTapePosition
TzSpecificLocalTimeToSystemTime
GlobalFree
GetSystemTime
GetTickCount
GetCurrentProcess
TerminateProcess
GetVersionExA
Sleep

user32

SetCursor
GetMessageTime
DefDlgProcW
GetWindowTextW
GetClientRect
CallMsgFilterW
EnumDesktopWindows
GetMenuItemCount
BroadcastSystemMessageA
ShowCursor

gdi32

SetMiterLimit
GetKerningPairsA
GetDeviceCaps
GetStretchBltMode

advapi32

IsValidAcl
ReadEventLogA
RegSaveKeyExW
GetSecurityDescriptorRMControl
ObjectPrivilegeAuditAlarmW
SetSecurityDescriptorSacl
StartServiceCtrlDispatcherA

Exports

Exports

KxAogh
KxBhlrk
KxCc
KxClwko
KxCrnqzr
KxDlj
KxDya
KxEnjdac
KxEpaku
KxFex
KxFpwn
KxFwutvv
KxGctcbd
KxGg
KxIcwc
KxIfqgaa
KxKnazt
KxKrokn
KxKs
KxKss
KxKtwxnw
KxKvu
KxLfonal
KxLkgzw
KxNd
KxNjdw
KxNzzw
KxOtaau
KxPrwqlr
KxQd
KxQhio
KxRc
KxRs
KxScos
KxSi
KxSsff
KxTvepzp
KxUg
KxVd
KxVojh
KxVrw
KxVsljcn
KxWf
KxWtlo
KxXanh
KxYkeuuj
KxYm

Sections

.text
Size: 241KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4df88836a7fbe23dd3fc507ff49bb95f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 241KB - Virtual size: 240KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 2KB - Virtual size: 434KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 241KB - Virtual size: 240KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 2KB - Virtual size: 434KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 21KB - Virtual size: 21KB