8e719b2d1ad34acc22ccd6ac3aa752417f565c084bcfad467817d7c8e20db9ed

Sharing

Copy URL Twitter E-mail

General

Target

8e719b2d1ad34acc22ccd6ac3aa752417f565c084bcfad467817d7c8e20db9ed
Size

194KB
MD5

84eee67524294e42d5706f7188961142
SHA1

1b7cac3177d8fbe2edb089ce1a142903cfdab40e
SHA256

8e719b2d1ad34acc22ccd6ac3aa752417f565c084bcfad467817d7c8e20db9ed
SHA512

7b12032eb214bc6b9112435609f443a07c45ce29abe019de6c2ed8615d42826a2a947fa320b0fd499ef51afb302b84c021fbd6c0a91718f26944849cd4a18416
SSDEEP

3072:7Yd8W8Q3uVuPiaWwU/b+IwsjldTI4EDwyDJvDd2jDan6ZDOllZOKxsZ+puumn6bq:DIpUyNy+B8DanZlZO9uOmWQ2

Score

N/A

Malware Config

Signatures

Files

8e719b2d1ad34acc22ccd6ac3aa752417f565c084bcfad467817d7c8e20db9ed
.dll windows x64

26813c58d30a2e6cd36cdb2d4b121eab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

PulseEvent
WideCharToMultiByte
TlsSetValue
TlsGetValue
TlsAlloc
CloseHandle
UnmapViewOfFile
CreateEventA
GetLastError
CreateFileMappingA
ExpandEnvironmentStringsA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
GetModuleFileNameA
DeleteCriticalSection
LoadLibraryExA
FreeLibrary
CreateProcessA
WaitForSingleObject
InitializeCriticalSection
CreateMutexA
MultiByteToWideChar
WriteConsoleA
SetStdHandle
ReadFile
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrlenA
HeapFree
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
HeapAlloc
RaiseException
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
FlsGetValue
TlsFree
FlsFree
SetLastError
FlsAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
HeapSetInformation
HeapCreate
HeapDestroy
LCMapStringA
LCMapStringW
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

PostMessageA
wsprintfA
LoadStringW
LoadStringA
PtInRect
IsWindow
GetWindowThreadProcessId

advapi32

RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

CommitPlugIns
ConfigurePlugIn
DllGetVersion
ExitPlugIns
FindAndGetCustomZoneProperty
GetActionHandle
GetActivePlugIn
GetActivePlugInDefault
GetNumPlugIns
GetPlugInActionIDA
GetPlugInActionIDW
GetPlugInBitmapID
GetPlugInHandle
GetPlugInHandleW
GetPlugInHelpCommand
GetPlugInHelpData
GetPlugInHelpFile
GetPlugInHelpFileW
GetPlugInKeySequence
GetPlugInLongName
GetPlugInLongNameW
GetPlugInOrderID
GetPlugInRegistryValueToChangeA
GetPlugInRegistryValueToChangeW
GetPlugInShortName
GetPlugInShortNameW
GetPlugInValidZones
GetPlugInWindowMessageA
GetPlugInWindowMessageW
IsPlugInConfigurable
IsPlugInValidOnDevice
IsPlugInValidOnZone
ReInitZonesA
ReInitZonesW
RegisterActionHandle
RegisterPlugIn
RegisterPlugInW
RevertPlugIns
SendPlugInEvent
SetActivePlugIn
StartPlugIns
UpdateTPList

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26813c58d30a2e6cd36cdb2d4b121eab

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 8KB - Virtual size: 16KB

.pdata Size: 8KB - Virtual size: 7KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 8KB - Virtual size: 16KB

.pdata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 2KB - Virtual size: 1KB