78d1c586b54ff49c7c7b55b2843254ae6e78f3072f57c98b3e5a59c3bc4b8ff6

General

Target

78d1c586b54ff49c7c7b55b2843254ae6e78f3072f57c98b3e5a59c3bc4b8ff6
Size

175KB
MD5

43e25f0eeb35a595bda4e5b12cdd7980
SHA1

94e54976b0f2f17df83cd504d64af0a33236362e
SHA256

78d1c586b54ff49c7c7b55b2843254ae6e78f3072f57c98b3e5a59c3bc4b8ff6
SHA512

01423efdd831387a960177fd74f373f9dc26fed1f9ebaaf0c2db726c9f1835df25bd170db7e17e38328a242ef7020fa3d1f67f55d7461b1865dfd795cc86718b
SSDEEP

3072:6jUtVsMnXfZKYO83hfSI44X66BiDCmGxxG59/JtsPYtUsWsIpmnOFI3O5YadIACQ:6Qr3RKYYIdq6BluD5tUsWYOanadIACji

Score

N/A

Malware Config

Signatures

Files

78d1c586b54ff49c7c7b55b2843254ae6e78f3072f57c98b3e5a59c3bc4b8ff6
.dll windows x86

dba77aa4a3c3ffe080529ad1d74568da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHCreateDirectoryExW
CommandLineToArgvW

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

gdi32

ArcTo
PolyDraw

kernel32

VirtualProtect
lstrlenW
VirtualFree
VirtualAlloc
ExitProcess
FindFirstFileW
FindNextFileW
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetModuleHandleA
GetProcAddress
InterlockedExchange
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter

user32

MessageBoxW
IsWindow

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_controlfp
_exit
_initterm
_ismbblead
_wcsdup
_wcslwr
exit
free
memset
printf
wcsstr
wprintf

Exports

Exports

AHeartbeat
CreateLink
DeleteContext
GetCurrentIndex
MShutDown
Move
PSTCreateTypeSubType_NoUI
RicheditStreamIn
Rollback
fGetBrowserUrlEncoding

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba77aa4a3c3ffe080529ad1d74568da

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

gdi32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB