f4865a4ed918889ff5c8a453c8fcaf6808794e6c9b90117a3672751af775cbee

Sharing

Copy URL Twitter E-mail

General

Target

f4865a4ed918889ff5c8a453c8fcaf6808794e6c9b90117a3672751af775cbee
Size

329KB
MD5

83d2c47b144d0b3021ad31ac16639df5
SHA1

389421db90f03bb2dd38caf4a25d1ba195c38ead
SHA256

f4865a4ed918889ff5c8a453c8fcaf6808794e6c9b90117a3672751af775cbee
SHA512

733ae1347c2d08dac789bed3db4b57108c59cc12a9c140b686b50e833dbc6c704bb6fe5f8cbf45653022037b5c47c4b58ac53705781fa86f699fa010c010488b
SSDEEP

6144:XAOWqyz+jGr/5ma1LwpAnhH9tR42pOnErTkre+07DnvRLKoDJlyqggGnpbTMg5Ko:Xz5yz+j6tFV9ternEHkrsXRVKBnpbTzU

Score

N/A

Malware Config

Signatures

Files

f4865a4ed918889ff5c8a453c8fcaf6808794e6c9b90117a3672751af775cbee
.dll windows x86

5daa0a60357638dbf024d2b44a9f817b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

WriteClassStm
OleSaveToStream
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
OleNoteObjectVisible
OleLoadFromStream
CreateOleAdviseHolder
CreateDataAdviseHolder
CoTaskMemAlloc
CoImpersonateClient
CoCreateInstanceEx
CoCreateInstance

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

user32

UnionRect
SwitchToThisWindow
ShowWindow
SetWindowRgn
SetWindowPos
SetWindowLongA
SetFocus
ReleaseDC
RegisterClassExA
PtInRect
OffsetRect
IsWindow
IsGUIThread
IsChild
InvalidateRect
GetWindowLongA
GetParent
GetKeyState
GetFocus
GetClientRect
GetClassInfoExA
EndPaint
DrawIcon
CreateWindowExA
CharNextA
BeginPaint

gdi32

RestoreDC
Rectangle
GetDeviceCaps
SaveDC
CreateRectRgnIndirect
CreateMetaFileA
CreateCompatibleDC
SetTextAlign
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutA
DeleteMetaFile
GdiPlayPageEMF
CloseMetaFile

oleaut32

VariantInit
VariantClear
VariantChangeType
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
RegisterTypeLi
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi

kernel32

RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LoadResource
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
RtlUnwind
IsDebuggerPresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
GlobalUnlock
GlobalLock
GlobalAlloc
SetHandleCount
SetLastError
SizeofResource
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrlenA
lstrlenW
IsProcessorFeaturePresent
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStartupInfoA
GetProcessPriorityBoost
GetProcAddress
GetModuleHandleA
GetLastError
GetCurrentProcessId
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
GetVersionExA

Exports

Exports

DeprecationWarning
HashNotImplemented
Int_Fini
Int_FromSsize_t
Number_Check
SetFromWindowsErr
info_init
vResolveTokenVar

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5daa0a60357638dbf024d2b44a9f817b

Headers

File Characteristics

Imports

ole32

advapi32

user32

gdi32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 142KB - Virtual size: 142KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 50KB - Virtual size: 51KB

.rsrc Size: 58KB - Virtual size: 57KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 142KB - Virtual size: 142KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 50KB - Virtual size: 51KB

.rsrc
Size: 58KB - Virtual size: 57KB

.reloc
Size: 9KB - Virtual size: 9KB