da4afd7be6067349cfe67ddd3717b17fbcd1adb4abb264fb2735eece3f988664

Sharing

Copy URL Twitter E-mail

General

Target

da4afd7be6067349cfe67ddd3717b17fbcd1adb4abb264fb2735eece3f988664
Size

95KB
MD5

22524903bf382db1a9b0c979545341e0
SHA1

a9519484cddd03f537642e49d88cf10bbfddc45d
SHA256

da4afd7be6067349cfe67ddd3717b17fbcd1adb4abb264fb2735eece3f988664
SHA512

535ab21cfade923d20ff32dd8278c45ccd653e47c8bea96957787008edfb4390223178bc67d17cf8fc74474705b9e172c7e052219b54b0d57196ed6bcc2354ea
SSDEEP

1536:6XGchK/PQXoLOQuhyitdPZF8XXVtMxN1twIUHNPCvJYYGMcE0nOXLFRsqe446:6WchMQ46HyIEXfMxxQtjYGMjcyRsqe4n

Score

N/A

Malware Config

Signatures

Files

da4afd7be6067349cfe67ddd3717b17fbcd1adb4abb264fb2735eece3f988664
.dll windows x86

1bb5e97bc3898b5267426e0b1d11475b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsZoomed
GetShellWindow
GetMenuInfo
CopyRect

gdi32

GetCharABCWidthsFloatA
CreateBrushIndirect
GetICMProfileW
GetWindowOrgEx
GetFontUnicodeRanges
SetStretchBltMode
CreateRoundRectRgn
CreatePalette
GetTextCharsetInfo
SetTextCharacterExtra
ColorMatchToTarget
SetWindowOrgEx
SetWinMetaFileBits
CreatePolygonRgn
CopyMetaFileW
GetEnhMetaFileHeader
SelectObject

kernel32

EnumSystemLanguageGroupsA
LocalAlloc
LocalFree
HeapUnlock
VirtualAlloc
GetSystemInfo
SetLocaleInfoA
SetConsoleCursorInfo
WriteConsoleW
GetDriveTypeA
GetStartupInfoA
QueryDosDeviceW
GlobalDeleteAtom
CreateNamedPipeW
GetEnvironmentStrings
CallNamedPipeA
WritePrivateProfileStructW
GlobalAddAtomA
BackupWrite
GetProfileIntW
GetSystemInfo
SetConsoleTextAttribute
SetConsoleMode
CopyFileW
VirtualQuery
GetFileAttributesA
DisableThreadLibraryCalls
GetCurrencyFormatA
GetLogicalDriveStringsW
Beep
MoveFileW
GetThreadLocale
EscapeCommFunction
SetLocalTime
DeleteAtom
SetFileTime
LocalHandle
CreateMutexW
SetDefaultCommConfigW
TerminateProcess
GetConsoleWindow
DeleteVolumeMountPointW
ReleaseMutex
GlobalMemoryStatus
WritePrivateProfileSectionA
GetSystemDirectoryW
FindResourceExW
GetProcAddress
ReplaceFileA
SetupComm
GetPrivateProfileSectionW
DebugActiveProcess
VirtualProtect
SetLocaleInfoW
GetWindowsDirectoryA
GetTimeFormatA

Exports

Exports

TaskDatabaseDirectory
TaskLossyControl
TaskMultithreadingFlat
TaskRemote
TaskToolbar
TaskTooltipRemote

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bb5e97bc3898b5267426e0b1d11475b

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 5KB

.tls Size: 70KB - Virtual size: 70KB

.reloc Size: 1024B - Virtual size: 84KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 5KB

.tls
Size: 70KB - Virtual size: 70KB

.reloc
Size: 1024B - Virtual size: 84KB