d4e634e0d0b391fccf13767e3318aedcdcc751b1c32fe6b97d3d9eab75fa0296

Sharing

Copy URL Twitter E-mail

General

Target

d4e634e0d0b391fccf13767e3318aedcdcc751b1c32fe6b97d3d9eab75fa0296
Size

520KB
MD5

e8606df3d084ba776de097b3aeae34de
SHA1

8481606754083753f6bd700f91b693c779f61110
SHA256

d4e634e0d0b391fccf13767e3318aedcdcc751b1c32fe6b97d3d9eab75fa0296
SHA512

952b48798826118b65b04fd173bab44eaeba5b85bfdb1d88067aee99f13e59116085c50051db08e6c815fccd5d36d3b47137b8f58ac5c298d3f355c62062668c
SSDEEP

6144:qf3Pqmy7uW/V8RGcj2Dh0/YOuJotX0giQ4zEqbR:+y7z/V8Rhj2nOfegiVEI

Score

N/A

Malware Config

Signatures

Files

d4e634e0d0b391fccf13767e3318aedcdcc751b1c32fe6b97d3d9eab75fa0296
.dll windows x86

3aa10c7704f9cca33d02dc1c64364942

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
DisableThreadLibraryCalls
VirtualProtect
CreateFileA
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
RaiseException
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetConsoleCtrlHandler
IsBadCodePtr
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
ReadFile
GetCPInfo
GetACP
GetOEMCP
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
SetEndOfFile

user32

SetWindowLongA
SetWindowPos

d3dx9_26

D3DXCreateFontIndirectA

Sections

.text
Size: 448KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3aa10c7704f9cca33d02dc1c64364942

Headers

File Characteristics

Imports

kernel32

user32

d3dx9_26

Sections

.text Size: 448KB - Virtual size: 445KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 16KB - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 448KB - Virtual size: 445KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 16KB - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 15KB