47a95045cefb2659f8ef0780899cb1e92ab74e56d1f8efc0202d8bc3f6dac0ce

General

Target

47a95045cefb2659f8ef0780899cb1e92ab74e56d1f8efc0202d8bc3f6dac0ce
Size

128KB
MD5

4308951206ba8fa1cdef2cfb64802c13
SHA1

5f192b3054de04f03904d82a9c9c7a9f423e398b
SHA256

47a95045cefb2659f8ef0780899cb1e92ab74e56d1f8efc0202d8bc3f6dac0ce
SHA512

cf5233507910bdbc634443b65318ed78eb99e60d01fd689ab4ec8088a064a58b31cab058b097700f4ae4ab66bf658125a6670ce816a266b5f7e8b555f89517c7
SSDEEP

3072:DJWoMsL5bDutMgAlUaMSzKbax6Xvkjsd+VN9Qs:DJTMsL5IMTlUaMeSMjScTQ

Score

N/A

Malware Config

Signatures

Files

47a95045cefb2659f8ef0780899cb1e92ab74e56d1f8efc0202d8bc3f6dac0ce
.dll windows x86

e24ba09deaefc71e63806f7e43b6ca1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
Sleep
lstrlenA
WaitForSingleObject
EnterCriticalSection
GetLastError
InterlockedDecrement
LocalFree
GetCommandLineA
GetTickCount
ReleaseMutex
SetLastError
CloseHandle
GetModuleFileNameA
CopyFileA
LeaveCriticalSection
lstrlenW
LoadLibraryA
MapViewOfFile
OpenEventA
InterlockedIncrement
CreateDirectoryA
CreateEventA
InterlockedCompareExchange
UnmapViewOfFile
CreateProcessA
ExitProcess
GetModuleHandleA

ole32

CreateBindCtx
CoUninitialize
OleSetContainedObject
CoCreateGuid
CoInitialize
OleCreate

user32

CreateWindowExA
GetParent
RegisterWindowMessageA
DefWindowProcA
DispatchMessageA
GetMessageA
PostQuitMessage
KillTimer
SendMessageA
SetWindowLongA
PostMessageA
DestroyWindow
FindWindowA
GetWindowLongA
SetTimer
TranslateMessage
GetSystemMetrics
GetClassNameA

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString

shlwapi

UrlUnescapeW
StrStrIW

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

Exports

Exports

Cdnetext

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e24ba09deaefc71e63806f7e43b6ca1d

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB