172c7c0639fb1a253f2de2afe9abe3c861bba2aa7548cdc68e7569e045aad3c3

Sharing

Copy URL Twitter E-mail

General

Target

172c7c0639fb1a253f2de2afe9abe3c861bba2aa7548cdc68e7569e045aad3c3
Size

390KB
MD5

ca6cbbabbb1f4a2d296a0398ee3f7f8b
SHA1

fa921ac7390e8669235baf49dc1c34ed73dd9ad7
SHA256

172c7c0639fb1a253f2de2afe9abe3c861bba2aa7548cdc68e7569e045aad3c3
SHA512

b564b7304f3caa466dac3b885028b745ca718bc6ba48f250b34e4ee98b77b068c0cb40d9135e655dc3f8751ee5e8331c42728f9f38a8512af3151f0f9fca69d1
SSDEEP

6144:3maqorlDUhmI9OvPd/c+wZsvAahpqWOrcbhEdbP6ejTMoxZ89JYHMlErcD:fqVhpOHpNThkChbe3M6G9WHuV

Score

N/A

Malware Config

Signatures

Files

172c7c0639fb1a253f2de2afe9abe3c861bba2aa7548cdc68e7569e045aad3c3
.dll windows x86

0ee0645a57e58588d3b56479597c422f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW

kernel32

ExitProcess
FreeConsole
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
LoadLibraryA
QueryPerformanceCounter
ResumeThread
CreateProcessW
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
WriteProcessMemory
CloseHandle

user32

GetAncestor
GetDlgItem
GetFocus
GetParent
GetSystemMetrics
MessageBoxW
MsgWaitForMultipleObjects
SendDlgItemMessageW
SendMessageW
SetWindowLongW
ShowWindow
CheckDlgButton
EnableWindow

ntdll

RtlInitUnicodeString
RtlNtStatusToDosError
RtlUnicodeStringToInteger
NtQueryInformationProcess
NtSetSystemInformation
NtQuerySystemInformation

comctl32

PropertySheetW

Exports

Exports

CreateCubeTextureFromFileW
EnumAttributes
FindSearchTableIndex
FrameCalculateBoundingSphere
GetCurrentContext
IntersectTri
MapLDAPTypeToADSType
MatrixDecompose
NextAttribute

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ee0645a57e58588d3b56479597c422f

Headers

File Characteristics

Imports

advapi32

kernel32

user32

ntdll

comctl32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 174KB - Virtual size: 173KB

.data Size: 68KB - Virtual size: 68KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 174KB - Virtual size: 173KB

.data
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 5KB - Virtual size: 5KB