40c97f8e4843e698cff4765958f6578b7a02a1aeb2539d37618024d91f4d3f94

General

Target

40c97f8e4843e698cff4765958f6578b7a02a1aeb2539d37618024d91f4d3f94
Size

79KB
MD5

e2dd8ce09e093f5b2d3da35fb122b0d7
SHA1

4d313ee95f8627f35a4cb05deab4f166d297d89e
SHA256

40c97f8e4843e698cff4765958f6578b7a02a1aeb2539d37618024d91f4d3f94
SHA512

ebb9f2ba64270341bd099a8c17eca26865e90fcfb1f90813d0f03d54c9857244850d06574f4e6d82be6d03269cc750bcd9a704ff0d7dc96b4516309f5134dd16
SSDEEP

1536:Q1gPIVBFygC0pXGFQq7PPHoZuDIOlIOenToIfq5/0:aBF1JpXGFnUZulv6TBfq58

Score

N/A

Malware Config

Signatures

Files

40c97f8e4843e698cff4765958f6578b7a02a1aeb2539d37618024d91f4d3f94
.dll windows x86

171cf5d74e3fa67246f96e64b71f076c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
LoadLibraryW
GetProcAddress
GetWindowsDirectoryW
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers

user32

CallNextHookEx
SetWindowsHookExW
wsprintfW

Exports

Exports

SetHook

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

171cf5d74e3fa67246f96e64b71f076c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 4KB