e803e1a0fb88a6dd7ece59377887381c947cc9f11cc80c1ce0ad7b9f6a554263

Sharing

Copy URL Twitter E-mail

General

Target

e803e1a0fb88a6dd7ece59377887381c947cc9f11cc80c1ce0ad7b9f6a554263
Size

146KB
MD5

0da23873ab022b916363839f78a64099
SHA1

60964ef55f5f381b40f3b4e2a516e6a4f08eb84f
SHA256

e803e1a0fb88a6dd7ece59377887381c947cc9f11cc80c1ce0ad7b9f6a554263
SHA512

699da417f3b26f066251dfc1ccef753680a6dfb2760e7419da1339d09ae8e5eaaa8c2fa261c02ae91b9c67783b5fa36d1e8b1f35571c00fb55a10653bc43bc0b
SSDEEP

3072:sloipMEp7D4JHdEb3xqSDFr29HTePUYuEDDy60WlE8Rr:gMEBDGO3xFDFS9HyUYuEDD+0V

Score

N/A

Malware Config

Signatures

Files

e803e1a0fb88a6dd7ece59377887381c947cc9f11cc80c1ce0ad7b9f6a554263
.dll windows x86

793780ec46e7501893e5efae2401049d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyW
RegQueryInfoKeyW
GetTrusteeTypeW
LsaNtStatusToWinError
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
SystemFunction024
RegOpenKeyA

gdi32

GetICMProfileA
GetTextExtentPoint32W
SetTextJustification

kernel32

ConnectNamedPipe
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
RaiseException
SetUnhandledExceptionFilter
SuspendThread
TerminateProcess
UnhandledExceptionFilter
VerifyVersionInfoW
lstrcmpiW
lstrlenW
CloseHandle
CreateEventA
CreateThread
ExpandEnvironmentStringsW
FreeLibrary
GetComputerNameA
GetCurrentProcessId
GetCurrentThreadId
GetHandleInformation
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryA
HeapDestroy
HeapReAlloc
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
SetEvent
SetLastError
Sleep
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
lstrcmpA
lstrcpyA
lstrcpyW
lstrlenA
GetCommandLineA
VirtualAlloc
ClearCommError
CreateFileA
GetFileSize
GetLocalTime
GetModuleHandleA
GetSystemDirectoryA
ReadFile
ReleaseMutex
SetCommTimeouts
WriteFile
LoadResource
FindResourceA
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapSize
VirtualQuery
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
FatalAppExitA
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetVersionExA
ExitProcess
TlsAlloc
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
SetEnvironmentVariableA

ole32

CLSIDFromProgID
StringFromGUID2
CoInitialize
CoCreateInstance
CLSIDFromString
UtConvertDvtd16toDvtd32

oleaut32

LoadRegTypeLi
SysStringByteLen
VarBstrCmp
VarI1FromCy
VarI2FromCy
VarI4FromUI4

rpcrt4

RpcServerRegisterAuthInfoW
RpcMgmtEnableIdleCleanup
NdrServerInitializeMarshall
MesInqProcEncodingId
I_RpcServerRegisterForwardFunction
I_RpcAllocate
RpcSmFree
NdrSimpleStructMemorySize
MesEncodeDynBufferHandleCreate

user32

CharNextW
DispatchMessageA
SendNotifyMessageW
EnableWindow
SendIMEMessageExA
SetDlgItemTextW
TileWindows

Exports

Exports

TWSTJDJVQZT

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

793780ec46e7501893e5efae2401049d

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 6KB - Virtual size: 5KB