e58421608cec79c4dc1fd6d3ce810caa1e8d4e96384afcd632885d6d105f7a0f

Sharing

Copy URL

Twitter E-mail

General

Target

e58421608cec79c4dc1fd6d3ce810caa1e8d4e96384afcd632885d6d105f7a0f
Size

244KB
MD5

0c3372a818efaf67e82f11188d0e0c4f
SHA1

766e92d6e00a6d1c7ca799b0ca6b7df3df6c1b37
SHA256

e58421608cec79c4dc1fd6d3ce810caa1e8d4e96384afcd632885d6d105f7a0f
SHA512

5e552c46a83b4e4a050e29752292d0608597bf08ce0b4ab88ac836bcfcae1b5aec981e6c36dd2146d3978f971db481cc51b2bfab139ee0719e22d7bb4077434d
SSDEEP

6144:QQPLpQkUB4uIXXff7H5E7jhWKOKHS+4YhyT:dDqdB2HX7HCuKV4P

Score

N/A

Malware Config

Signatures

Files

e58421608cec79c4dc1fd6d3ce810caa1e8d4e96384afcd632885d6d105f7a0f
.dll windows x86

47ab943064516009e589b74a07e1f10f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
CreatePropertySheetPageA

advapi32

RegDeleteKeyA

oleaut32

SysFreeString
VariantCopyInd
VarFormat
VarBoolFromUI4
SysAllocString
SysStringLen

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerFindFileW
VerInstallFileW
VerQueryValueA
VerQueryValueW
VerFindFileA

ole32

HMETAFILEPICT_UserFree
HMETAFILE_UserUnmarshal
OleTranslateAccelerator
CoTaskMemAlloc

kernel32

lstrcmpiA
WaitForMultipleObjects
VirtualProtectEx
SizeofResource
ReadFile
ReadConsoleInputA
ProcessIdToSessionId
PrepareTape
OpenFileMappingW
MapViewOfFile
LockResource
LocalLock
LoadResource
LoadLibraryA
InterlockedExchangeAdd
HeapCreate
HeapAlloc
GetVersionExA
GetStartupInfoA
GetModuleHandleA
CreateEventA
CreateJobObjectW
CreateMailslotA
ExitProcess
FatalAppExitW
FileTimeToSystemTime
FindResourceExA
GetCommMask
GetCommandLineA
GetCompressedFileSizeW
GetEnvironmentVariableW
GetFileAttributesA

rpcrt4

NdrServerInitializeMarshall
NdrFullPointerQueryRefId
I_RpcSend

Exports

Exports

BindSurfaceToArray
D3D10ResourceGetMappedPointer
D3D9ResourceSetMapFlags
EncodeJFIF
EnumDriveModeRelease
EnumImageItemRelease
GraphicsD3D11RegisterResource
Memcpy2DFromArray

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47ab943064516009e589b74a07e1f10f

Headers

File Characteristics

Imports

comctl32

advapi32

oleaut32

version

ole32

kernel32

rpcrt4

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 72KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 72KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB