ea91c8dff5a6994380cfaa29e8c646e832c907cc8cf53cee8fcf5cd59d04d7d1

Sharing

Copy URL

Twitter E-mail

General

Target

ea91c8dff5a6994380cfaa29e8c646e832c907cc8cf53cee8fcf5cd59d04d7d1
Size

96KB
MD5

8383d1b058d0ed2a640d413fa6baea65
SHA1

6cc2278984b34e62d3bcecd38bb27faf8de01800
SHA256

ea91c8dff5a6994380cfaa29e8c646e832c907cc8cf53cee8fcf5cd59d04d7d1
SHA512

437997907289fb8b2760173ffcad6ff50c99474ff7dcc06cb0500485f0b035ba2856be2b5becbc16091beeb8c0fa7ab1079369f862c10aff731ce571050d92c2
SSDEEP

1536:lXt8lQJ3bvh6uxGpsuVLBQrzGI/fvnmjwjTYZnMNUAtPShHm:l98shLGps+QrzXrjTYduahG

Score

N/A

Malware Config

Signatures

Files

ea91c8dff5a6994380cfaa29e8c646e832c907cc8cf53cee8fcf5cd59d04d7d1
.dll windows x86

31355bee6a17693f3fb5ef67124a68a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingW
MultiByteToWideChar
InterlockedExchange
MapViewOfFile
InterlockedCompareExchange
lstrlenW
InterlockedDecrement
GetCurrentProcess
GetCommandLineA
WideCharToMultiByte
GetProfileIntA
FindClose
CloseHandle
FindNextFileA
FindFirstFileA
lstrlenA
MulDiv
FindResourceExA
LoadResource
LockResource
CreateDirectoryA
LoadLibraryExA
GetTempFileNameA
CreateFileA
FreeLibrary
GetTempPathA
lstrcpyA
WriteFile
MoveFileA
DeleteFileA
GetLocalTime
ExpandEnvironmentStringsA
VirtualProtect
Sleep

user32

DestroyWindow
wsprintfA
CharNextA
EnableWindow
LoadStringA
CheckDlgButton
WinHelpA
BeginPaint
EndPaint
GetDlgItem
SendMessageA
CreateWindowExA

advapi32

GetTokenInformation
RegOpenKeyA
RegCloseKey
RegCreateKeyExW
GetSidSubAuthority
GetSidSubAuthorityCount
RegOpenKeyExW
RegQueryValueA
OpenProcessToken
ConvertSidToStringSidW
IsValidSid
RegQueryValueExA

gdi32

GetTextMetricsA
CreateFontIndirectA
SelectObject
DeleteDC
TextOutA
GetTextExtentExPointA
GetStockObject
EndDoc
GetDeviceCaps
EndPage
GetObjectA
SetMapMode
DeleteObject
StartPage
SetBkMode

msvcrt

_stricmp
strrchr
malloc
_callnewh
_adjust_fdiv
memcpy
memset
__dllonexit
_onexit
free
_initterm
_lock
_except_handler3
strchr

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31355bee6a17693f3fb5ef67124a68a8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

msvcrt

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 33KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 33KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 1KB