509356a803b82f4104a119cab03039d178f861054706d3f90c6162310c080dfe

General

Target

509356a803b82f4104a119cab03039d178f861054706d3f90c6162310c080dfe
Size

257KB
MD5

010f0c6a83437b8a1954502f98681c03
SHA1

91cbe0d23a76be1fdeb872af4d265a482626e7f0
SHA256

509356a803b82f4104a119cab03039d178f861054706d3f90c6162310c080dfe
SHA512

2b4f7e1245fdeef91ae7b95f7658896523cdae74077315f5112146f67c9d12c009553ea4fb7a89b21958bb043e5894148080ca8656d014b9788a4a00eaef4abf
SSDEEP

6144:oWo86W6iSBdpqL2PzzkF5oZmDGRHwdgrG+IGUuj/1C0yBlOgfTqTbXImQ7e2WVV2:8S5oZmDXj28LYrHP

Score

N/A

Malware Config

Signatures

Files

509356a803b82f4104a119cab03039d178f861054706d3f90c6162310c080dfe
.dll windows x86

60611e1cbf22a930e680f6a9211ed8a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
_lclose
GlobalLock
GlobalAlloc
OpenFile
GlobalFree
GlobalUnlock
_lread
_llseek
FatalAppExitA
_hread
WideCharToMultiByte
GetEnvironmentStringsW
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleFileNameA
GetCPInfo
GetACP
lstrlenA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
DebugBreak
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
HeapFree
RtlUnwind
SetFilePointer
FlushFileBuffers
SetStdHandle
CloseHandle
GetLocaleInfoW
GetLocaleInfoA
LCMapStringA
LCMapStringW

user32

GetFocus
MessageBoxA

Exports

Exports

ARB_check_word
ARB_suggest_word
CheckAffxApp
MMMP_main
NEW_ARB_check_word
NEW_ARB_suggest_word
WEP
cls_arb_speller
init_arb_speller
stand_alone_synth

Sections

.text
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60611e1cbf22a930e680f6a9211ed8a9

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 209KB - Virtual size: 209KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 20KB - Virtual size: 31KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 19KB - Virtual size: 18KB

.text
Size: 209KB - Virtual size: 209KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 20KB - Virtual size: 31KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 18KB