cbce4fb00caf57582d975651a725331933e09bc14fd9f9cd999d4227a7717e26

General

Target

cbce4fb00caf57582d975651a725331933e09bc14fd9f9cd999d4227a7717e26
Size

164KB
MD5

0b9fa429465517e556f2750e38102d19
SHA1

c07130e71d78d6364999baf102a83f2c86029db6
SHA256

cbce4fb00caf57582d975651a725331933e09bc14fd9f9cd999d4227a7717e26
SHA512

a9048dbffbca08ef866afe4496a16d8e71454b74bb70c1e229c49392e616025634bbe2fde9337d8084d52d6ef3a207318c9611d22168314a7d77ed3b62385f11
SSDEEP

3072:4hqKsvvf4DzDWz6elaKdjOkfL6oBSjNC1oNHH9xb0GW4vyNO5BwqL7il:/zf4DxehjXDsjNT9MGW3NUH/M

Score

N/A

Malware Config

Signatures

Files

cbce4fb00caf57582d975651a725331933e09bc14fd9f9cd999d4227a7717e26
.dll windows x86

6fbfd5a386d4142aa5559aae0e701121

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
Sleep
LoadLibraryA
InterlockedIncrement
InterlockedExchange
GetModuleFileNameA
GetComputerNameA
GetCurrentProcess
GetLocalTime
VirtualAlloc
VirtualProtect
DosDateTimeToFileTime
GetTickCount
GetProcAddress
GetCurrentThreadId
IsBadStringPtrA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
GetSystemTimeAsFileTime

user32

IsChild
GetDesktopWindow
GetGUIThreadInfo
IsIconic
IsZoomed
GetCursor
IsWindowUnicode
GetWindowTextLengthA
IsCharLowerA
IsCharUpperA
SetLastErrorEx
InSendMessage
CopyIcon
WindowFromDC
GetWindowRgn
IsCharAlphaA
GetWindow

advapi32

InitializeSecurityDescriptor
IsValidAcl
IsValidSecurityDescriptor
IsValidSid

msvcrt

_set_error_mode
_ultoa
srand
ldiv
_itoa
_adjust_fdiv
malloc
_initterm
free
memchr
_swab
_CItanh
_CIsinh
time
_hypot
_pctype
_isctype
ldexp
frexp
modf
__mb_cur_max
__doserrno
_CIcosh

gdi32

GetBitmapDimensionEx

ole32

CoGetCurrentProcess
CoFileTimeNow
CoDosDateTimeToFileTime
CoRevertToSelf

shell32

ord680
DuplicateIcon
ord66
ord64

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fbfd5a386d4142aa5559aae0e701121

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

ole32

shell32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 66KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 66KB

.reloc
Size: 3KB - Virtual size: 2KB