f2f91e4c73d90077922c861830c41d13521fe207bbca5966471ec28cc036cf70

Sharing

Copy URL Twitter E-mail

General

Target

f2f91e4c73d90077922c861830c41d13521fe207bbca5966471ec28cc036cf70
Size

4.6MB
MD5

3e1ed972a8d8bdc771949e28d68cd3f3
SHA1

2cdf048397f297b21d146864800c911e42bdf223
SHA256

f2f91e4c73d90077922c861830c41d13521fe207bbca5966471ec28cc036cf70
SHA512

d68a053aa2325182b7582b409039d6edfbcf48ff6027acde62c33441e587e409aa015d55df27d57947a68ff946152ac6dcd972facf25fefba95e6b00d0c4df84
SSDEEP

98304:Bvrr7GMY+Ukb8fljBEB/X+eMC/Q56aYMsrHRc/2nBmmk1FXUessPF:tr/meBPRMC/nalsT+/WmBFXO0

Score

N/A

Malware Config

Signatures

Files

f2f91e4c73d90077922c861830c41d13521fe207bbca5966471ec28cc036cf70
.dll windows x86

61611c90c13143e6d160f5ff2861bae1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
CreateEventA
Sleep
SetFileAttributesW
GetLastError
CreateDirectoryW
WriteFile
CreateFileA
LoadLibraryA
CreateDirectoryA
GetTempPathA
GetExitCodeProcess
TerminateProcess
ReadFile
CreateFileW
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
VirtualQuery
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
RaiseException
EncodePointer
DecodePointer
HeapFree
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

IsWindowEnabled
CallNextHookEx
SetWindowsHookExA
GetDesktopWindow
AdjustWindowRect
IsMenu
GetClassLongA
GetDlgCtrlID
GetSysColor
GetWindowTextLengthA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjectsEx
UnhookWindowsHookEx
GetMenu
AnyPopup
GetActiveWindow
GetDlgItemInt
GetFocus
IsIconic
GetWindow
ArrangeIconicWindows
GetSubMenu
GetCaretPos
GetScrollPos
GetDlgItem
GetMenuState
CheckMenuRadioItem

Exports

Exports

asdasd

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61611c90c13143e6d160f5ff2861bae1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 4.4MB - Virtual size: 4.4MB

.data Size: 75KB - Virtual size: 87KB

.reloc Size: 53KB - Virtual size: 53KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 4.4MB - Virtual size: 4.4MB

.data
Size: 75KB - Virtual size: 87KB

.reloc
Size: 53KB - Virtual size: 53KB