f1b94cb293645046db041ba30a582b568fcf8e60daed8d317e3d3ff2bc235e91

General

Target

f1b94cb293645046db041ba30a582b568fcf8e60daed8d317e3d3ff2bc235e91
Size

71KB
MD5

825a1ca1682b904b5af187fe1178504e
SHA1

bdc4d72d0edeb1fb668776c837a57422e09b152e
SHA256

f1b94cb293645046db041ba30a582b568fcf8e60daed8d317e3d3ff2bc235e91
SHA512

b0a9813f6c8c0f9f6c5a1f6136b8f84ee7546224e3d4793503a804049d8963c554106cab49dd46e22e304f0932e28f0cb809c8f9e02516edbc6ce4b965b6e283
SSDEEP

1536:9IKaNPqUA4CBbiheFo/g7tGOf5hOaDx9bT0iVQzbr:9HaxqU+BzwuG45hO+9vVQ3r

Score

N/A

Malware Config

Signatures

Files

f1b94cb293645046db041ba30a582b568fcf8e60daed8d317e3d3ff2bc235e91
.dll windows x86

da251f44eaf3ff388de9d8cd618b9c2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
LoadLibraryW
GetVersionExW
GetProcAddress
FreeLibrary
WaitForSingleObject
HeapFree
HeapAlloc
FindFirstFileW
FindClose
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
ReleaseMutex
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

LoadStringW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

msvcr80

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_decode_pointer
_encoded_null
free
_encode_pointer
wcscat_s
swprintf_s
wcscpy_s
wcschr
??3@YAXPAX@Z
memset
_malloc_crt
__CxxFrameHandler3

Exports

Exports

CheckApplicationStatus

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da251f44eaf3ff388de9d8cd618b9c2e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcr80

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 724B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 724B