792c6f658ad9eb0185c3324c7977b7309417f56b51cbfaad06297e64d6125176

Sharing

Copy URL Twitter E-mail

General

Target

792c6f658ad9eb0185c3324c7977b7309417f56b51cbfaad06297e64d6125176
Size

315KB
MD5

934d2704a5ade1272b933724834e7596
SHA1

4f9417d7dd36de9337b7f4113cebde8c00b833a9
SHA256

792c6f658ad9eb0185c3324c7977b7309417f56b51cbfaad06297e64d6125176
SHA512

f86f70f075aa31026ec27cf60cac793e5a842c07d4e4a2be61c9aba163366550397263f837da7d86e507796711b791d4937fc5a0706cf79ef9da976131ed6267
SSDEEP

6144:7TyWfvKdb0iwdK+dIQs9VP1ju8YAsCLGbS6ECrPK:vyiiQeLtu8lsCCvPK

Score

N/A

Malware Config

Signatures

Files

792c6f658ad9eb0185c3324c7977b7309417f56b51cbfaad06297e64d6125176
.dll windows x86

762555a757abe38eb2bcc60cb94c9443

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

I_BrowserQueryOtherDomains
NetEnumerateComputerNames
NetLocalGroupAddMembers
RxNetAccessGetUserPerms
NetReplImportDirGetInfo

version

VerFindFileA
VerQueryValueW
VerQueryValueA
VerFindFileW

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHLoadInProc
SHLoadNonloadedIconOverlayIdentifiers
DragQueryPoint

ole32

StgCreateDocfile
CoGetInterfaceAndReleaseStream

kernel32

GetTickCount
lstrlenA
lstrcmpiA
WaitForMultipleObjectsEx
VirtualProtect
VirtualFree
VirtualAlloc
TlsAlloc
TerminateThread
SizeofResource
SetThreadIdealProcessor
QueryPerformanceCounter
PurgeComm
ProcessIdToSessionId
MultiByteToWideChar
MulDiv
Module32Next
Module32First
LockResource
LoadResource
Beep
DeleteTimerQueueTimer
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
GetACP
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetModuleHandleA
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GlobalFree
GlobalHandle
GlobalLock
HeapCompact
HeapFree
InitAtomTable
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsProcessorFeaturePresent
LoadLibraryA
LoadLibraryExA

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

762555a757abe38eb2bcc60cb94c9443

Headers

File Characteristics

Imports

netapi32

version

shell32

ole32

kernel32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 141KB - Virtual size: 140KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 141KB - Virtual size: 140KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 3KB - Virtual size: 2KB