1c1c104d800d6c7fe4f059466abc492520aef7e0c673580c69e0f0d6c083e3e0

Sharing

Copy URL Twitter E-mail

General

Target

1c1c104d800d6c7fe4f059466abc492520aef7e0c673580c69e0f0d6c083e3e0
Size

76KB
MD5

835389ecd037d486521382c2e7b9d6b6
SHA1

30cf78c768505df9066420183564c54803dadb99
SHA256

1c1c104d800d6c7fe4f059466abc492520aef7e0c673580c69e0f0d6c083e3e0
SHA512

73dda1aa28a257c8a74b1eaefebb052a91f6c521e1916c2a86b63a8aa02e3c867882fc2f263e1adead5420e39f88470a962f23cea4cfb4033e00c51f1f714a80
SSDEEP

1536:E9WNfiGkjCHC7FoLezHAcDzS//oQphin3m:Eui2ejAcCr43m

Score

N/A

Malware Config

Signatures

Files

1c1c104d800d6c7fe4f059466abc492520aef7e0c673580c69e0f0d6c083e3e0
.dll windows x86

b845902eddabe0f7015f407368a81990

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
DisableThreadLibraryCalls
Sleep
lstrlenW
CreateFileW
GlobalUnlock
lstrcmpW
lstrcpyW
LocalFree
LocalAlloc
GetVersion
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
InterlockedIncrement
VirtualProtect
GlobalFree
GetCommandLineA
GlobalLock
GlobalAlloc

user32

SetWindowLongW
CheckDlgButton
SetDlgItemTextW
LoadStringW
EnumDisplayDevicesW
EndDialog
wsprintfW
GetWindowLongW
GetParent
RegisterClipboardFormatW
GetDlgItem
EnableWindow
WinHelpW
DialogBoxParamW
ChangeDisplaySettingsW
SendMessageW
IsDlgButtonChecked

advapi32

RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

rpcrt4

RpcRevertToSelf
RpcServerUnregisterIfEx
RpcRaiseException
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcImpersonateClient
RpcStringFreeW
NdrCStdStubBuffer_Release

msvcr71

wcsstr
towupper
_wcsicmp
_onexit
_initterm
_XcptFilter
memcpy
free
_amsg_exit
_except_handler3
_vsnprintf
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
memset

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b845902eddabe0f7015f407368a81990

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

msvcr71

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB