97463080ec45c41cff3110f5cf3800f15f1a4d5c3c60754fbe84025426c749b9

Sharing

Copy URL Twitter E-mail

General

Target

97463080ec45c41cff3110f5cf3800f15f1a4d5c3c60754fbe84025426c749b9
Size

207KB
MD5

534bbd0d9279e625e8a6e6acb94986aa
SHA1

dff200592cac8accb5917da5487c706b47846b37
SHA256

97463080ec45c41cff3110f5cf3800f15f1a4d5c3c60754fbe84025426c749b9
SHA512

644f1d8a8e56cbdc730bb54c453698cf2b746848795da9c1bcfd630b37550057cc94d5ba8dd10568a1e91a386ec7db313e6ffb82cd57db590bfc80ffafdc0eed
SSDEEP

3072:i65XNk5PzDmF+GHWZl3rvAV0tjwhGRZpd3NyAbclFuM/+mP4kBFihmywe7niUVfh:FRqDW2Z1rvAU2on3YAglRPFshhrJenn

Score

N/A

Malware Config

Signatures

Files

97463080ec45c41cff3110f5cf3800f15f1a4d5c3c60754fbe84025426c749b9
.dll windows x86

389f49232943e51f2e63f89d18a435fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CloseHandle
MapViewOfFile
OpenFileMappingW
OpenMutexW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ReleaseMutex
WaitForSingleObject
GetCurrentThreadId
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetModuleFileNameW
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
HeapSize

user32

IsWindow
PostMessageW
PostThreadMessageW
CallNextHookEx

Exports

Exports

LowLevelKeyboardProc
LowLevelMouseProc

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 175KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

389f49232943e51f2e63f89d18a435fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 175KB - Virtual size: 178KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 175KB - Virtual size: 178KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB