87e5d91857b90781137cedb4c60524207256f273d30ea670d690867b7d17775c

Sharing

Copy URL

Twitter E-mail

General

Target

87e5d91857b90781137cedb4c60524207256f273d30ea670d690867b7d17775c
Size

354KB
MD5

048165a5863ce7914f56d546ca381040
SHA1

d594ee446223d38a808e66e00d008afaf84ca92f
SHA256

87e5d91857b90781137cedb4c60524207256f273d30ea670d690867b7d17775c
SHA512

a3a0a13fdddf79bd2d08ce44a63e1d0fc8ea81ee8c0c192ed4cd653dc00f90b9db02612adf227a030ab003678e416785f2b5b76d00286ac491f16a2e947ded2e
SSDEEP

6144:crLrZ6khGKMKlH56XQMs+jlk2XJa5OPS82I+MJLSqgeORFsES9bd5YP:mLQkhGKMKlHEs+pk2XJa5982I+jqQKN2

Score

N/A

Malware Config

Signatures

Files

87e5d91857b90781137cedb4c60524207256f273d30ea670d690867b7d17775c
.dll windows x86

a0f3d87ebfea6a30f263da1b79b211ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

AccessibleObjectFromWindow
AccessibleObjectFromPoint

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrlenA
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetProcAddress
LocalFree
OpenProcess
CloseHandle
GetModuleHandleA
TerminateProcess
GetTickCount
GetCurrentProcessId
LoadLibraryExA
GetCommandLineA
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
InterlockedCompareExchange
ResumeThread
GetThreadContext
SetThreadContext
LeaveCriticalSection
SuspendThread
InterlockedIncrement
DeleteCriticalSection
LoadLibraryExW
GetModuleHandleW
GetNamedPipeHandleStateA
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
EncodePointer
GetStringTypeW
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
WriteFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetCPInfo
CompareStringW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThread
FlushFileBuffers
LocalAlloc
InterlockedExchange
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
Sleep
InitializeCriticalSection
RtlUnwind

user32

CharLowerBuffA
IsWindowVisible
CallNextHookEx
RegisterWindowMessageA
CallWindowProcA
CreateWindowExA
GetWindowLongA
SetWindowLongA
DestroyWindow
DefWindowProcA
LoadCursorA
GetClassInfoExA
RegisterClassExA
ClientToScreen
LockWindowUpdate
KillTimer
GetForegroundWindow
VkKeyScanExA
LoadKeyboardLayoutA
SetTimer
SendMessageA
GetKeyState
IsWindow
PostMessageA
FindWindowExA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetClassNameA
SendInput
MapVirtualKeyA
UnregisterClassA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

crashHandler

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a0f3d87ebfea6a30f263da1b79b211ab

Headers

DLL Characteristics

File Characteristics

Imports

oleacc

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 221KB - Virtual size: 220KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 7KB - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 21KB - Virtual size: 20KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 221KB - Virtual size: 220KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 7KB - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 21KB - Virtual size: 20KB

.rmnet
Size: 56KB - Virtual size: 60KB