4f0b69bf775613b754d224ae33780bf03b806a165f3eeaa0cf8e22ba8a24e741

Sharing

Copy URL Twitter E-mail

General

Target

4f0b69bf775613b754d224ae33780bf03b806a165f3eeaa0cf8e22ba8a24e741
Size

180KB
MD5

0c136a3453fca4cfa00836bcef6f1d90
SHA1

74bf6f543fe01732528e00133f6cb9dbd9a02f70
SHA256

4f0b69bf775613b754d224ae33780bf03b806a165f3eeaa0cf8e22ba8a24e741
SHA512

dbeec5b1d2b9afff354ba5d11e8c576bb526518c5fd97ece5c56423d53c5e99fadee8013c955761cdac67f967e2712882ec2367b4350ab964eea6d9d7c661f27
SSDEEP

3072:fMo2QlI9Lmvnm5mWGNVzwdeWLE/YUnJ5cWyE8klldPFSa/EK0pV7SKs9X/Dd3F:Y9CvpbKzLE/YwJBy8bdPF1wpojZV

Score

N/A

Malware Config

Signatures

Files

4f0b69bf775613b754d224ae33780bf03b806a165f3eeaa0cf8e22ba8a24e741
.dll windows x86

995f357aacad839dbc4d09c3078f6824

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetLayeredWindowAttributes
SetWindowPos
SetWindowLongW
GetWindowLongW
GetWindowInfo

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

xpcom

NS_Alloc

kernel32

VirtualFree
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile

Exports

Exports

NSGetModule

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

995f357aacad839dbc4d09c3078f6824

Headers

File Characteristics

Imports

user32

nspr4

xpcom

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 108KB - Virtual size: 112KB