f5b1f02dcb87c2f469dd83c726d490c5d7a522bcd9c10f8bd448f85d76f885e8

Sharing

Copy URL Twitter E-mail

General

Target

f5b1f02dcb87c2f469dd83c726d490c5d7a522bcd9c10f8bd448f85d76f885e8
Size

311KB
MD5

a3760a577fc716b50c6ccf65e94d2e17
SHA1

1ae7ca52483eef6649f8832557ea30d1f51c96a6
SHA256

f5b1f02dcb87c2f469dd83c726d490c5d7a522bcd9c10f8bd448f85d76f885e8
SHA512

d25fa4808aae0e8fdea0b96cca282e59b708ab79a4eb891a0641e356b83ccb81bee3871b9f5a0035f863a05fca1629f49da7749d30ec25ae997633ba8e8f6e9b
SSDEEP

6144:jx11+wCu34gewBQyNRKOZ1bOyVID55ErsuMsnvsz/flNL7lIGScn:/1+Hu3d6MbDVgIUMsfnHlIv

Score

N/A

Malware Config

Signatures

Files

f5b1f02dcb87c2f469dd83c726d490c5d7a522bcd9c10f8bd448f85d76f885e8
.dll windows x86

fee502d8ef0ee80da15252a2b97c33d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
CharNextW
CreateDialogParamA
DestroyWindow
GetForegroundWindow
GetParent
GetSystemMetrics
UnhookWindowsHookEx
ShowWindow
SetWindowsHookExA
SetFocus
RegisterClipboardFormatA
MoveWindow
IsZoomed
IsWindowVisible
IsIconic
GetWindowRect
GetWindowLongA
CallNextHookEx

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantClear
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

kernel32

VirtualAlloc
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
SizeofResource
SetLastError
SetHandleCount
RtlUnwind
RaiseException
QueryPerformanceCounter
VirtualFree
LoadResource
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapReAlloc
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrlenA
lstrlenW
MultiByteToWideChar
GetEnvironmentStringsW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree

Exports

Exports

FromStringAndSize
GetIter
IsInstance
Items
Member_Set
_ascii_formatd
_strtol
get_pixels_per_meter
get_y_offset_pixels

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fee502d8ef0ee80da15252a2b97c33d7

Headers

File Characteristics

Imports

user32

ole32

oleaut32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 153KB - Virtual size: 153KB

.data Size: 35KB - Virtual size: 35KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 153KB - Virtual size: 153KB

.data
Size: 35KB - Virtual size: 35KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 3KB - Virtual size: 3KB