ec80464a342822ab479b638d80888fa62d585211374aad8ac2ecd8b0e4d69046

Sharing

Copy URL Twitter E-mail

General

Target

ec80464a342822ab479b638d80888fa62d585211374aad8ac2ecd8b0e4d69046
Size

2.6MB
MD5

99e223b8ef46a72bece27120112c32fd
SHA1

415abc72d776e6ec2201012fcd4ebf0f0b0a7ae5
SHA256

ec80464a342822ab479b638d80888fa62d585211374aad8ac2ecd8b0e4d69046
SHA512

eae2936acf0da90286a4f72184f75f6acd1189ccb6fe11d68e98be76f28c4cedead8d66dc103a04cc1966e2863a264bfd95ac12737609ce180f34d1870c45a95
SSDEEP

49152:sDeeQXvsPfRxkSSXRTc9TKwuHPkg0tyLauOfwhK/BE3NuTlL:+eeQXvKfRxkFXRTkKHBiuOwyGuR

Score

N/A

Malware Config

Signatures

Files

ec80464a342822ab479b638d80888fa62d585211374aad8ac2ecd8b0e4d69046
.dll windows x86

3114efd172d153e4eb0fb711bbaac047

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
CreateEventA
Sleep
SetFileAttributesW
GetLastError
CreateDirectoryW
WriteFile
CreateFileA
LoadLibraryA
CreateDirectoryA
GetTempPathA
GetExitCodeProcess
TerminateProcess
ReadFile
CreateFileW
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
VirtualQuery
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
RaiseException
EncodePointer
DecodePointer
HeapFree
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

ArrangeIconicWindows
GetCaretPos
IsWindowEnabled
GetWindowTextLengthA
CallNextHookEx
GetSysColor
IsMenu
GetClassLongA
GetDlgCtrlID
SetWindowsHookExA
GetSubMenu
PeekMessageA
TranslateMessage
GetDlgItem
DispatchMessageA
GetMenuState
MsgWaitForMultipleObjectsEx
CheckMenuRadioItem
GetDesktopWindow
UnhookWindowsHookEx
AdjustWindowRect
GetMenu
AnyPopup
GetActiveWindow
GetDlgItemInt
GetFocus
IsIconic
GetWindow
GetScrollPos

Exports

Exports

asdasd

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3114efd172d153e4eb0fb711bbaac047

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 2.4MB - Virtual size: 2.4MB

.data Size: 44KB - Virtual size: 55KB

.reloc Size: 32KB - Virtual size: 32KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.data
Size: 44KB - Virtual size: 55KB

.reloc
Size: 32KB - Virtual size: 32KB