e780c8b963d7920dab8276dc26a07fcd02329db871d0563469e4dae6bf3400d1

Sharing

Copy URL Twitter E-mail

General

Target

e780c8b963d7920dab8276dc26a07fcd02329db871d0563469e4dae6bf3400d1
Size

892KB
MD5

901cb7b1a416eb424e9851ef6cb4a311
SHA1

27b40ba39d0337dfe4a6c087c97c00000d495427
SHA256

e780c8b963d7920dab8276dc26a07fcd02329db871d0563469e4dae6bf3400d1
SHA512

946a4e6d27ea6a28946d842d36c7311bf04efdb090c4f1ba5161de6b3d692bdda6bfe5fc208ca3b3eba53a247b76ef2cdec1df440e7f7bc6d6f6d97e6ad767e2
SSDEEP

12288:fyEm/W6P2wOHuSSRY5bZklkEpfOyQgEmxwkLl4nEMCxBO9Sp1P5Cfdv6yklSrXGO:fc/T2YnGspM8ki3l5pck14Ma2MBYy

Score

N/A

Malware Config

Signatures

Files

e780c8b963d7920dab8276dc26a07fcd02329db871d0563469e4dae6bf3400d1
.dll windows x86

d7816d11e7091c0d484aaf7ea9c4a329

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarUI4FromStr
SysFreeString
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
RegisterTypeLi

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW

ole32

PropVariantClear
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoTaskMemFree
StringFromGUID2

kernel32

CreateEventW
GetExitCodeThread
CancelWaitableTimer
LeaveCriticalSection
TerminateProcess
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
SetWaitableTimer
InterlockedCompareExchange
FindResourceW
GetVersionExA
DeviceIoControl
ReleaseMutex
SetEvent
GetTickCount
QueryPerformanceCounter
WaitForMultipleObjects
LocalFree
WaitForSingleObject
LoadResource
GetDateFormatA
UnhandledExceptionFilter
GetCurrentProcessId
CloseHandle
GetModuleFileNameW
EnterCriticalSection
RaiseException
OutputDebugStringA
VirtualAlloc
GlobalFree
InterlockedIncrement
DeleteCriticalSection
GetModuleHandleW
SetUnhandledExceptionFilter
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
Sleep
FreeLibrary
CreateThread
ResetEvent
CreateFileW
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
ReadFile
lstrlenW
CreateMutexW
LocalAlloc
GetOverlappedResult
lstrcmpiW
GlobalAlloc
GetCurrentThreadId
CreateWaitableTimerW
SetThreadLocale
GetThreadLocale

setupapi

SetupDiDestroyDeviceInfoList
CM_Get_Parent
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
CM_Get_Device_IDW
CM_Get_Sibling
CM_Get_Child
SetupDiGetClassDevsW
CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW

Exports

Exports

FillContiguousStrides
FlagsFilename
InPlaceAnd
NewException
SetObjectType
StringAFromFormat
UnicodeWarning
vInitW

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7816d11e7091c0d484aaf7ea9c4a329

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

kernel32

setupapi

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 186KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 448KB - Virtual size: 448KB

.rsrc Size: 168KB - Virtual size: 167KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 188KB - Virtual size: 186KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 448KB - Virtual size: 448KB

.rsrc
Size: 168KB - Virtual size: 167KB

.reloc
Size: 12KB - Virtual size: 9KB