6a33b39ba46ac6aa8fa31077798473ed4279dee9ec502f73e4df3d8ab9207262

Sharing

Copy URL Twitter E-mail

General

Target

6a33b39ba46ac6aa8fa31077798473ed4279dee9ec502f73e4df3d8ab9207262
Size

272KB
MD5

39026017a0d9ede8f614f2f4ed771790
SHA1

b460b1297c88ac917dbdd1d1d8a9ce755a11a15d
SHA256

6a33b39ba46ac6aa8fa31077798473ed4279dee9ec502f73e4df3d8ab9207262
SHA512

733a6fd7a8756c51abf7551afaef7272d16d5fc68a218187c1834a241951205e146b9fbf8930cf14e7f5a658e4a1954ae16cc7b6afedac9cf4868a8ec76d8ab1
SSDEEP

3072:3a59+MwxCyv8xHLxeKwU0PLiZ0QMW/pGziXCpmd6trq0PhWA:qOxCyI70oBMCQq0ZW

Score

N/A

Malware Config

Signatures

Files

6a33b39ba46ac6aa8fa31077798473ed4279dee9ec502f73e4df3d8ab9207262
.dll windows x86

b3763fecce84f5e0f27c9c8582cb452a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueW

kernel32

DisableThreadLibraryCalls
WideCharToMultiByte
lstrlenW
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
ReadFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VarI2FromI4

user32

wsprintfW

Exports

Exports

SWBHOQ

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3763fecce84f5e0f27c9c8582cb452a

Headers

File Characteristics

Imports

advapi32

kernel32

ole32

oleaut32

user32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 184KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 8KB - Virtual size: 19KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 188KB - Virtual size: 184KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 8KB - Virtual size: 19KB

.reloc
Size: 8KB - Virtual size: 7KB