465fb13727d88bf184e7644449c0d9e0ccc6484b4ef730994260d595d4ce87ec

General

Target

465fb13727d88bf184e7644449c0d9e0ccc6484b4ef730994260d595d4ce87ec
Size

318KB
MD5

b80d2c75fa7d4e2bcc52dd5f75d92a63
SHA1

92d662cf2be935f4b96a5d928850e2186904e830
SHA256

465fb13727d88bf184e7644449c0d9e0ccc6484b4ef730994260d595d4ce87ec
SHA512

0705f47a789b5422c9244dce046a37c82b5b37cf7efb373ec34afeb4ca6e87f34becb1c3fae995bbdba01996c80bc3914e0129cc399474a5ab69f84485e66ea6
SSDEEP

6144:ZqX5tlQhzD1galUg1Rj2CWK+iUdtC03gMq80uf4oRadwP0to1v12XzJE:Z2bYDiQz0lih80uf4oRTUKkdE

Score

N/A

Malware Config

Signatures

Files

465fb13727d88bf184e7644449c0d9e0ccc6484b4ef730994260d595d4ce87ec
.dll windows x86

cce8e32724b97d21f76e1b4195d60adf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

LdrVerifyImageMatchesChecksum

imm32

ImmUnlockIMCC
ImmSimulateHotKey
ImmSetStatusWindowPos
ImmSetOpenStatus
ImmGetOpenStatus
ImmIsIME

shell32

RegenerateUserEnvironment
FreeIconList
DuplicateIcon
DragQueryPoint
DragAcceptFiles

kernel32

SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WriteProcessMemory
lstrcmpA
lstrcpynA
lstrlenA
SetThreadPriorityBoost
SetPriorityClass
RegisterWaitForSingleObjectEx
QueryPerformanceCounter
ProcessIdToSessionId
MulDiv
CancelDeviceWakeupRequest
CancelTimerQueueTimer
ExitProcess
FindResourceA
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetHandleInformation
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcessHeap
GetProcessPriorityBoost
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetTapeParameters
GetTickCount
GetVersionExA
GlobalAlloc
GlobalHandle
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LoadLibraryA
LoadResource
Module32First
Module32NextW

Exports

Exports

CreateMarkers
CreatePolygon
MatrixRotationZ
mpegInSeekSample

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cce8e32724b97d21f76e1b4195d60adf

Headers

File Characteristics

Imports

ntdll

imm32

shell32

kernel32

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 63KB - Virtual size: 63KB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 63KB - Virtual size: 63KB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 1KB - Virtual size: 1KB