60da9d9b50f76bc784fded31f01cd41fcf675e97e4c628917172f028c8c1f73c

Sharing

Copy URL Twitter E-mail

General

Target

60da9d9b50f76bc784fded31f01cd41fcf675e97e4c628917172f028c8c1f73c
Size

87KB
MD5

0dbfe4baddd176b25a448c1cc9160b40
SHA1

0627a913b7fe9faa2482cbea974d90d697ede79a
SHA256

60da9d9b50f76bc784fded31f01cd41fcf675e97e4c628917172f028c8c1f73c
SHA512

4def0f74329fc85703aa6b8ac0185367f5f38851b040aa2b38dac321f76dc83491a6756cd1f8aa21ffcf7c85d45bbf88295e5ea88834f8d4150af99e4d570642
SSDEEP

1536:lOKL6/lCOSpgAJ6pGkAtGSvWNY/Wd3egVZ8P0/qa420+Yf/8ybccla6dn:lOv/l1SpgEPkAgSv/WEo8P4vX0+Y9hlT

Score

N/A

Malware Config

Signatures

Files

60da9d9b50f76bc784fded31f01cd41fcf675e97e4c628917172f028c8c1f73c
.dll windows x86

da819f7433f1415471735cb2a3405b19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
CreateEventA
CreateThread
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
QueueUserAPC
SetEvent
WaitForSingleObject
CloseHandle
GetComputerNameA
Sleep
SleepEx
GetTickCount
GlobalAlloc
LocalAlloc
LocalFree
GlobalFree
WideCharToMultiByte
LoadLibraryExA
SetUnhandledExceptionFilter
FindResourceA
LoadResource
SizeofResource
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
GetNumberFormatA
CompareFileTime
SystemTimeToFileTime
GetSystemTime
MultiByteToWideChar
HeapFree
TerminateThread
GetProcessTimes
HeapCreate
ExitThread
WaitForMultipleObjectsEx
SuspendThread
ResumeThread
GetShortPathNameA
GetLastError
HeapAlloc

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc

user32

PeekMessageA
CreateWindowExA
RegisterClassA
UnregisterClassA
PostMessageA
DefWindowProcA
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CharNextA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteKeyA

Exports

Exports

RuAdjustttWindow

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da819f7433f1415471735cb2a3405b19

Headers

File Characteristics

Imports

kernel32

ole32

user32

advapi32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 38KB - Virtual size: 65KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 38KB - Virtual size: 65KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB