2907ff8fe0abc9b4f156c783aca4dbd2458d81b4a8aee278195493e1992564b4

General

Target

2907ff8fe0abc9b4f156c783aca4dbd2458d81b4a8aee278195493e1992564b4
Size

336KB
MD5

0ba5a42945f57f2a706b05e117b4c6eb
SHA1

c0f077a4e2ab7bebe2827e82a5426f40bae2cfb2
SHA256

2907ff8fe0abc9b4f156c783aca4dbd2458d81b4a8aee278195493e1992564b4
SHA512

e7371d8271254c86789972e1f6cfce0434b542649232bab6f35d10164d3b0f19f2d97621f345fedea1baf72e81f390185ef227cc76da4782e6f6757e498e0695
SSDEEP

6144:FXmuJxx1GvIq2/DX1DSVkUr56j2rvg9yJ4Q8Ryd3vJRBC3I0zT1a2Et:FWix2YZSVkU9PvuQeyPC3I0Na

Score

N/A

Malware Config

Signatures

Files

2907ff8fe0abc9b4f156c783aca4dbd2458d81b4a8aee278195493e1992564b4
.dll windows x86

17a69ee85fc54be0bfbd8331611e21a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA

oleaut32

VarDecNeg
VarDateFromDec
VariantCopyInd
SysStringLen
SafeArrayGetElemsize
VarCyFromDec

kernel32

EnumDateFormatsExA
EnumDateFormatsExW
ExitProcess
ExpandEnvironmentStringsW
FindFirstVolumeMountPointW
GetBinaryTypeA
GetCommConfig
GetCommandLineA
GetDateFormatA
GetFileSizeEx
GetModuleHandleA
GetTapeParameters
GetVersionExA
CreateJobObjectW
HeapAlloc
HeapCreate
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
LocalReAlloc
Module32FirstW
ReadFileEx
ReplaceFileW
SetFileAttributesW
UnmapViewOfFile
VirtualProtectEx
lstrcatW
lstrlenA
CompareFileTime
AddConsoleAliasW
GlobalLock

ole32

CoGetClassVersion
CoRegisterMallocSpy
StgCreateDocfile
OleCreateLinkToFile
CoTaskMemRealloc
CLSIDFromProgIDEx

imm32

ImmUnregisterWordA
ImmReleaseContext
ImmReSizeIMCC
ImmIsIME
ImmGetCompositionFontW
ImmGetVirtualKey
ImmEnumInputContext

comctl32

PropertySheetA

ntdll

wcscpy
wcscspn
RtlInitString
RtlDestroyEnvironment

Exports

Exports

AudioGUIConfigureItem
BindSurfaceToArray
DAE
EnumIIMInfoReset
EnumImageItemReset
GetBaseImageDataPropertyCount
GetCustomFunctionSettingCount
GetDevSplineArray
GetLocalizedWaitCDTexts

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17a69ee85fc54be0bfbd8331611e21a9

Headers

File Characteristics

Imports

advapi32

oleaut32

kernel32

ole32

imm32

comctl32

ntdll

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 204KB

.data Size: 120KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 204KB - Virtual size: 204KB

.data
Size: 120KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB