4a7bfe1edc4e0fa2d0c94970f458704bc0f62fc176dce61f33eaf6447fc44da9

General

Target

4a7bfe1edc4e0fa2d0c94970f458704bc0f62fc176dce61f33eaf6447fc44da9
Size

44KB
MD5

81cbbc89fc23507d693de66a6b5b5f30
SHA1

d193df2532382d155dd7277b99a6e4ed83c0c663
SHA256

4a7bfe1edc4e0fa2d0c94970f458704bc0f62fc176dce61f33eaf6447fc44da9
SHA512

b9c322a8b6ed427c42322fbf9002b2ca18b292ea8f71f9f9aae4e4c43507c0093cd202b1b8ae6ec6bd930a5c8c978db9d93832fec57e760f94c4a1bffc768533
SSDEEP

768:RbdUqAzm3vlEbZDZXW00o0P8kGvmcekxkeq/xM:1vlsNXHzc3kjkeA

Score

N/A

Malware Config

Signatures

Files

4a7bfe1edc4e0fa2d0c94970f458704bc0f62fc176dce61f33eaf6447fc44da9
.dll windows x86

ed7463432b4a1620f581e95457a1c73a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetLastError
CreateMutexA
SetLastError
CloseHandle
WaitForSingleObject
CreateEventA
SetEvent
GetVolumeInformationA
GetTempPathA
GetSystemDirectoryA

user32

CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowLongA

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
_CxxThrowException
??1exception@@UAE@XZ
memmove
strlen
memcpy
memset
sprintf
strchr
strncpy
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
_splitpath

Exports

Exports

set_create_window_hook
unset_create_window_hook

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ed7463432b4a1620f581e95457a1c73a

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 4KB

Shared Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.pdata Size: - Virtual size: 52KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 4KB

Shared
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB

.pdata
Size: - Virtual size: 52KB