37ec295625cc0557ec8f90f08760591c336ddc7a32a47eb3094c0e736cc04a14

Sharing

Copy URL Twitter E-mail

General

Target

37ec295625cc0557ec8f90f08760591c336ddc7a32a47eb3094c0e736cc04a14
Size

453KB
MD5

82e9c9fe7213b3710577c8c4b54015b9
SHA1

02a6cbfa3f56fa6a3d6fbc49cabe56dd3bab373d
SHA256

37ec295625cc0557ec8f90f08760591c336ddc7a32a47eb3094c0e736cc04a14
SHA512

fb172589227ec4a710d9b693e866dad68abc32e5c530b91c60929641d1be2ff49ee68624f2f0493a45cab978814d81dc1073d4a67cb64ccfb5a6a8dc1d14a4b8
SSDEEP

6144:1kMc6h1BxufSmCVVkzlkexN+yie4iPaxETeZAQx6aGZg0fPtTLipMC2LHaM:XLh1BxufSmCbkRxieBPReZA7FTdBHaM

Score

N/A

Malware Config

Signatures

Files

37ec295625cc0557ec8f90f08760591c336ddc7a32a47eb3094c0e736cc04a14
.dll windows x86

b7e66457b3115b9c637439ac2a6d9b2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UnregisterDeviceNotification
DefWindowProcA
DestroyWindow
DispatchMessageA
FindWindowA
GetMessageA
IsWindow
PostQuitMessage
RegisterClassA
RegisterDeviceNotificationA
UpdateWindow
CreateWindowExA
TranslateMessage
SendMessageA

advapi32

RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA

msvcrt

_chmod
_fdopen
_fstat
_getcwd
_stat
_strdup
_umask
_unlink
sprintf

kernel32

HeapAlloc
HeapCreate
WideCharToMultiByte
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
HeapDestroy
HeapFree
HeapReAlloc
WriteFile
GetLastError
Sleep
SetHandleCount
RtlUnwind
ReleaseMutex
ProcessIdToSessionId
MultiByteToWideChar
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
CloseHandle
CreateFileA
CreateMutexA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetFileType
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTickCount
GetVersion
InitializeCriticalSection

gdi32

GetStockObject

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

Exports

Exports

GetFuncDesc
IOError
NewClassMethod
SoftSpace

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7e66457b3115b9c637439ac2a6d9b2b

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

gdi32

setupapi

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 210KB - Virtual size: 209KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 210KB - Virtual size: 209KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 5KB - Virtual size: 5KB