2e9f720c0d64405b3e4e6aef5ad2afa2c108b766f0a7f4749e9f9cff6f0f1a37

Sharing

Copy URL Twitter E-mail

General

Target

2e9f720c0d64405b3e4e6aef5ad2afa2c108b766f0a7f4749e9f9cff6f0f1a37
Size

165KB
MD5

0fde5e3dc1898b7bc3b60c60f949c0c6
SHA1

e1559bd8a1ffab78c38152e5d0928992e3a044f3
SHA256

2e9f720c0d64405b3e4e6aef5ad2afa2c108b766f0a7f4749e9f9cff6f0f1a37
SHA512

126bcd9bc9c0123560fcd01f64de7350952ef335279b31cd7cf3ec4a4a91752f0de2f0895d6301120dcf3a2d6f65669111920d027206b95d19cf773529d98b79
SSDEEP

3072:KGF4h+5jcPiG8QDCII4Ss8RUwFTeWsXNYpkJqsPFPaCDzvaEs:lFxBcH8QDCII5s2JFTeWMNYpkRPECvv

Score

N/A

Malware Config

Signatures

Files

2e9f720c0d64405b3e4e6aef5ad2afa2c108b766f0a7f4749e9f9cff6f0f1a37
.dll windows x86

0580d0573098b9f5628418e96f3650a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateFreeThreadedMarshaler
CoDisconnectObject
CLSIDFromString
CoGetMalloc
CoCreateInstanceEx
ReleaseStgMedium

kernel32

WriteFile
VirtualQuery
VirtualAllocEx
WaitForSingleObject
ExitProcess
GetCommandLineA
LoadLibraryA

user32

MapWindowPoints
GetWindowThreadProcessId
IsWindowVisible
CheckMenuItem
LoadKeyboardLayoutA
GetCursor
RegisterWindowMessageA
GetWindowTextLengthA
DestroyCursor
CreateWindowExA
EmptyClipboard
RemovePropA
GetMessagePos
OemToCharA
EnumChildWindows
TranslateMDISysAccel
CharNextA
LoadBitmapA
SendMessageA
InflateRect
GetMenuItemInfoA
SetWindowLongA
IsCharLowerA
FrameRect
SetParent
GetWindowDC
IsRectEmpty
GetKeyNameTextA
ScrollWindow
MoveWindow
GetForegroundWindow
GetScrollPos
IsChild
OffsetRect
SetTimer
GetDesktopWindow
ReleaseCapture
GetMenuStringA
GetMenu
GetDCEx
DispatchMessageW
DestroyMenu
CreatePopupMenu
GetSysColor
ScreenToClient
SendMessageW
DrawEdge
InsertMenuItemA
CharNextW
GetWindowLongW
PeekMessageA
DefWindowProcA
GetIconInfo
TrackPopupMenu
CharUpperA
GetParent
DrawIcon
PostMessageA
DrawIconEx
UnregisterClassA
IsDlgButtonChecked
GetWindow
GetMenuState
DrawMenuBar
IsIconic
AdjustWindowRectEx
SystemParametersInfoA
GetKeyboardLayoutList
EnableWindow
InvalidateRect
GetKeyboardType
WaitMessage
EnableMenuItem
SetWindowLongW

gdi32

GetBkColor

Exports

Exports

_dkJWu_0qCcXK@8
_N90S81
uNzftfgD
_lcipu9BJgwH0
1Fu4Z@12
_HOaXxDUvqUUV@24
Ovv8wG
iM4ntG6Sln
KW2V4wqwQwdkfT@8
VMlVYQ@8
_YrGPe8
HswM2f6kQRSAO@12
cJIx7RU
_WU4zfree@24
g3JAXtceYH4B@4
Y3Vo8nPoI7KF3c
0ZE6Rr@20
_Dn6JP0t8q@12
_vdlPcvsm@12
_N3SHBZi@16
_cSXm6VuFlQBWHU
_tqHO08JUzuZwHK@8
_U41zzsVdra2kQ
_IzeRD4
VwUSVQ0UFecgz@24
_APzUrAnx@4
_Lxf0c@8
oCDyvp0KRqo

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0580d0573098b9f5628418e96f3650a6

Headers

File Characteristics

Imports

ole32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 159KB

.data Size: 148KB - Virtual size: 147KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 159KB

.data
Size: 148KB - Virtual size: 147KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB