7f6fc3f31e8cb45f5a7b5c4dff2bfc776c536800dd6eb1261465e24e63c27cea

Sharing

Copy URL

Twitter E-mail

General

Target

7f6fc3f31e8cb45f5a7b5c4dff2bfc776c536800dd6eb1261465e24e63c27cea
Size

112KB
MD5

936858f9a30a8c59eff657baf599d0f0
SHA1

2657148989d506549766b478a1ec7efe4f2584c2
SHA256

7f6fc3f31e8cb45f5a7b5c4dff2bfc776c536800dd6eb1261465e24e63c27cea
SHA512

c2ca13395ec7a5c517933e3957df6fe197bc42601993130996aad0774501800b5e6166d7606f59fda57c92a2b80c92bd55d6b2c94de40a6f4afcb9338c4caa37
SSDEEP

3072:wnWLuSJYHyZnCdaPBza7wUG1B1QHJxqGnYBOE:wnWLT2yZCd23UGL+JxYOE

Score

N/A

Malware Config

Signatures

Files

7f6fc3f31e8cb45f5a7b5c4dff2bfc776c536800dd6eb1261465e24e63c27cea
.dll windows x86

5e11ddf68b6e51c3991a11a877148759

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetVersion
SwitchToFiber
FindFirstChangeNotificationA
GetLocaleInfoA
SetConsoleActiveScreenBuffer
FindResourceW
MapViewOfFile
GlobalFlags
GetConsoleKeyboardLayoutNameW
FreeLibrary
LoadLibraryW
SetVolumeLabelW
DeleteFiber
EnterCriticalSection
GetSystemPowerStatus
AllocConsole
GetLocalTime
VirtualFree
CreateTapePartition
CancelWaitableTimer
GetSystemTime
ConvertThreadToFiber
lstrcmpiW
TlsSetValue
GlobalFree
DeleteVolumeMountPointA
WriteFileEx
ReadConsoleInputW
FreeEnvironmentStringsA
IsValidCodePage
IsBadHugeReadPtr
GetNamedPipeHandleStateW
FillConsoleOutputCharacterW
SetConsoleFont
GetThreadLocale
DeleteCriticalSection
GetProcessHeaps
GlobalDeleteAtom
CreateNamedPipeW
GetConsoleCP
LocalHandle
CreateHardLinkW
GetACP
OutputDebugStringA
SetConsoleNumberOfCommandsW
QueryPerformanceFrequency
IsValidLocale
SetConsoleMaximumWindowSize
SetThreadExecutionState
SystemTimeToFileTime
GetFileSize
VerifyConsoleIoHandle
SetConsoleOutputCP
GetFileAttributesExW
SetConsoleTitleW
GetHandleInformation
SearchPathW
GetNumberOfConsoleMouseButtons
GlobalWire
GetMailslotInfo
CreateConsoleScreenBuffer
GetFileTime
SetHandleInformation
Heap32First
EndUpdateResourceW
FormatMessageA
SetFileAttributesA
GetProcAddress
EnumDateFormatsW
CreateFileW
lstrlenA
GetModuleHandleA
GetCalendarInfoW
GetDateFormatA
SetConsoleNumberOfCommandsA
GetDefaultCommConfigA
AddConsoleAliasA
FreeConsole
SetConsolePalette

user32

GetFocus
GetDlgItem
GetClipboardData
GetKeyboardType
GetMenuItemRect
DdeNameService
CreateIconFromResourceEx
GetMessageTime
SetMenu
IMPGetIMEA
EndDialog
OpenWindowStationW
IsCharAlphaNumericA
wsprintfW
CreateMDIWindowW
SendNotifyMessageA
DeleteMenu
IMPQueryIMEW
DdeDisconnect
GetParent
RemovePropA
UnhookWindowsHook
SetWindowRgn
GetClipboardOwner
CascadeWindows
SetThreadDesktop
GetMessageExtraInfo
GetAltTabInfoA
InsertMenuW
GetScrollBarInfo
SetTimer
DdeAccessData
CharPrevW
DragDetect
DefFrameProcW
ScrollChildren
DlgDirSelectExA
GetLastActivePopup
UnregisterDeviceNotification
TrackMouseEvent
SetMenuInfo
RemoveMenu
DdeQueryNextServer
SetClipboardViewer
BeginDeferWindowPos
GetAncestor
GetWindowLongA
DrawAnimatedRects
GetCursorInfo
CreateAcceleratorTableA
GetCursor
OpenClipboard
ClipCursor
ScrollDC
SetWindowWord
IsCharLowerW
FreeDDElParam
EnumDisplayMonitors
LookupIconIdFromDirectoryEx
DialogBoxParamA
DdeGetQualityOfService
SendMessageTimeoutA
UnregisterClassW

shell32

SHGetSettings
ShellAboutA
DragAcceptFiles
DragQueryFileW
DragQueryFileA
DragQueryFileAorW
SHFormatDrive
StrRStrW
FreeIconList
SHFileOperationA
RegenerateUserEnvironment
StrChrW
SHAddToRecentDocs
SHGetPathFromIDListW
StrNCmpW
SheChangeDirA
DoEnvironmentSubstA
StrRChrIW
StrCmpNIW
SHFreeNameMappings
StrRStrIA
SHEmptyRecycleBinA
StrCmpNW
CheckEscapesW
StrStrIW
SheGetDirA
DragQueryPoint
ord179
FindExecutableA
Shell_NotifyIconA
ShellAboutW
SHEmptyRecycleBinW
StrRChrW
InternalExtractIconListA
SHInvokePrinterCommandW
SHGetSpecialFolderPathA
SheSetCurDrive
Shell_NotifyIconW
SHInvokePrinterCommandA
StrRStrA
StrRStrIW
SHBrowseForFolderA
StrNCmpIA
SHUpdateRecycleBinIcon
InternalExtractIconListW
StrStrA
SHAppBarMessage
StrStrW
StrRChrIA

msvcrt

_mbsnicmp
_mbsnbcoll
__p___winitenv
fputs
fread
_strnicoll
_pipe
wcsncmp
ldexp
rewind
strtoul
_Strftime
wprintf
_fmode
_eof
_j1
_CIacos
fsetpos
_mkdir
cos
_CIpow
_strupr
_ismbckata
__p___wargv
fwprintf
_lrotl
__p__amblksiz
_outpw
fclose
ftell
fmod
strncmp
_wtmpnam
memset
printf
_ismbcl0
_safe_fdivr
ferror
fwrite
_getche
strtol
isleadbyte
fprintf
ceil
vswprintf
_fcvt
fgets
fseek
_wpgmptr
_wfdopen
_spawnl
_ismbcl1
_Gettnames
_ismbbkalnum
fopen
_ismbbprint
_itow
_umask
__crtLCMapStringA
sprintf
_unlink
fputc
feof

Exports

Exports

Ezacxbgizu
Fdqru
Kdxlzyyz
Moku
Mqfzbybo

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e11ddf68b6e51c3991a11a877148759

Headers

File Characteristics

Imports

kernel32

user32

shell32

msvcrt

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 52KB - Virtual size: 51KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 52KB - Virtual size: 51KB

.reloc
Size: 8KB - Virtual size: 5KB