554bdf099bde1734820d862287aea6aa270063e6e753041d21058104e0e0cb92

Sharing

Copy URL Twitter E-mail

General

Target

554bdf099bde1734820d862287aea6aa270063e6e753041d21058104e0e0cb92
Size

362KB
MD5

01463c48fe1f7e603fd9320c45846420
SHA1

45f5b188c55b95bd7c9be41bdd79acc901e23b70
SHA256

554bdf099bde1734820d862287aea6aa270063e6e753041d21058104e0e0cb92
SHA512

4e6b37bae5e3e38b5b59573a0539be46afe565e663a26659eeda124e60d1ddb5d5e53f228d69eabe15af24e9c7d73912cdf83a63167a8c8371779aabb9be1286
SSDEEP

6144:XJ6P/gTbXXmKzRwYJhV92vaEzeyLScVCxo9B:w/IXXmKzBhDkfRSbWb

Score

N/A

Malware Config

Signatures

Files

554bdf099bde1734820d862287aea6aa270063e6e753041d21058104e0e0cb92
.dll windows x86

1b603bcf595f504c298fd7347dc0ccf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
SwitchToThread
InitializeCriticalSection
lstrcmpA
GetLastError
GetEnvironmentVariableA
lstrcpynA
GetProcAddress
GetCurrentThreadId
LoadLibraryA
GetModuleHandleW
VirtualQuery
TlsSetValue
TlsGetValue
WideCharToMultiByte
CloseHandle
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
MapViewOfFile
OpenFileMappingW
OpenMutexW
TlsFree
TlsAlloc
FreeLibrary
CreateMutexA
GetCurrentProcessId
CreateFileMappingA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
LoadLibraryExA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemInfo
GetModuleFileNameA
GetModuleHandleExA
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeW
Sleep
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
GetStartupInfoW
IsProcessorFeaturePresent
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapSize
IsDebuggerPresent
GetProcessHeap
GetFileType
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetTimeZoneInformation
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
InterlockedIncrement

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

?GetTaskExecutor@TaskExecutor@OpenCL@Intel@@YAPAVITaskExecutor@123@XZ
?TE_RegisterGlobalAtExitNotification@TaskExecutor@OpenCL@Intel@@YAXPAVIAtExitCentralPoint@Utils@23@@Z
RegisterGlobalAtExitNotification

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1b603bcf595f504c298fd7347dc0ccf2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 21KB - Virtual size: 162KB

.tls Size: 512B - Virtual size: 13B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 30KB - Virtual size: 30KB

.rmnet Size: 86KB - Virtual size: 88KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 21KB - Virtual size: 162KB

.tls
Size: 512B - Virtual size: 13B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 30KB - Virtual size: 30KB

.rmnet
Size: 86KB - Virtual size: 88KB