4692e023fdeeb606f65883e0acbf7cce1f5634bb992f11a1c50133e86a4e7e40

Sharing

Copy URL Twitter E-mail

General

Target

4692e023fdeeb606f65883e0acbf7cce1f5634bb992f11a1c50133e86a4e7e40
Size

44KB
MD5

bb743e32350e141aa741321d44f6c9e9
SHA1

968e619473f442a0786e098a6f7759cf323fe91e
SHA256

4692e023fdeeb606f65883e0acbf7cce1f5634bb992f11a1c50133e86a4e7e40
SHA512

7454c2b56f08fa3ba885b8de722b04a07f04c7659550936197a820301161cffc146069a04af9f94a934a0da0ada136b0b5f378eaf74bc1d53a30169945d0ff4d
SSDEEP

768:HzXsRnKeJ3CI87/6xWhcDSmpBXMJH8enh5krvDoK:LsRnKMS4xJBeH8Wwv0K

Score

N/A

Malware Config

Signatures

Files

4692e023fdeeb606f65883e0acbf7cce1f5634bb992f11a1c50133e86a4e7e40
.exe windows x86

3f6eab0ace50f1b1c17db4e0e862b4dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetCompositionFontW
ImmWINNLSGetEnableStatus
ImmGetIMCLockCount
ImmGetImeMenuItemsW
ImmSetCompositionStringA
ImmConfigureIMEA
ImmLockImeDpi
ImmSetHotKey
ImmUnregisterWordW
ImmGetOpenStatus
ImmAssociateContextEx
ImmRegisterClient
ImmGetIMEFileNameA
ImmInstallIMEW
ImmIsUIMessageW
ImmPutImeMenuItemsIntoMappedFile
ImmGetContext
ImmSetActiveContextConsoleIME
ImmInstallIMEA
ImmUnlockIMCC
ImmIMPGetIMEA
ImmFreeLayout
ImmCreateSoftKeyboard
ImmSendIMEMessageExW
ImmGetCompositionWindow
ImmGetCompositionStringW
ImmGetHotKey
ImmRegisterWordA
ImmGetConversionListA

crtdll

__argc_dll
_mbcjmstojis
_execv
isxdigit
_mbbtombc
_ismbbprint
signal
_getsystime
putchar
_mbsset
scanf
_CIpow
rewind
_copysign
difftime
_errno
_ltow
remove
atof
_CIasin
fgets
fflush
wcscoll
_global_unwind2
qsort
labs
iswlower
bsearch
_fputwchar
_mbsstr
_mbsicmp

cryptdll

CDLocateRng
CDLocateCSystem
CDFindCommonCSystem
CDRegisterRng
CDBuildVect
CDLocateCheckSum
MD5Final
CDRegisterCSystem
CDFindCommonCSystemWithKey
CDRegisterCheckSum
CDBuildIntegrityVect
MD5Update
CDGenerateRandomBits
MD5Init

kernel32

GetCurrentProcessId
DefineDosDeviceA
GetCommandLineW
OpenConsoleW
FreeConsole
ResetEvent
lstrcpyn
AllocateUserPhysicalPages
BackupRead
GetProcessIoCounters
GetCommandLineA
GetOEMCP
CreateConsoleScreenBuffer
VirtualAlloc
ExitProcess
SetComputerNameExA
GetFileInformationByHandle
HeapCreate
TlsAlloc
_lopen
GetTickCount
IsValidLanguageGroup
GetConsoleOutputCP
FlushConsoleInputBuffer
BaseCleanupAppcompatCacheSupport
OpenSemaphoreA
QueryPerformanceCounter
GlobalFix
OpenEventA
GetPrivateProfileSectionA
LoadLibraryA
QueryMemoryResourceNotification
HeapValidate
GetNextVDMCommand
AddConsoleAliasA
SetLocalPrimaryComputerNameA
GetFileTime
EnumSystemLanguageGroupsW
GetThreadPriority
GetCurrentDirectoryA

d3d8thk

OsThunkDdUpdateOverlay
OsThunkD3dDrawPrimitives2
OsThunkDdDestroyD3DBuffer
OsThunkDdCreateSurface
OsThunkDdDestroySurface
OsThunkDdAddAttachedSurface
OsThunkDdBlt
OsThunkDdRenderMoComp
OsThunkDdColorControl
OsThunkDdAttachSurface
OsThunkDdQueryDirectDrawObject
OsThunkDdGetDriverInfo
OsThunkDdSetOverlayPosition
OsThunkDdLockD3D
OsThunkDdCanCreateSurface
OsThunkDdSetGammaRamp
OsThunkDdUnlockD3D
OsThunkDdBeginMoCompFrame
OsThunkDdGetDC
OsThunkD3dContextDestroy
OsThunkDdFlipToGDISurface
OsThunkDdEndMoCompFrame
OsThunkDdLock
OsThunkDdAlphaBlt
OsThunkDdCreateDirectDrawObject
OsThunkDdGetAvailDriverMemory
OsThunkDdUnattachSurface
OsThunkDdCreateD3DBuffer

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f6eab0ace50f1b1c17db4e0e862b4dd

Headers

DLL Characteristics

File Characteristics

Imports

imm32

crtdll

cryptdll

kernel32

d3d8thk

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 7KB - Virtual size: 7KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1KB - Virtual size: 1KB