d4fa89ce559b0c06ec7e3a9af41f6840e91d5d8746062e2f2ef252b83dfb30da

General

Target

d4fa89ce559b0c06ec7e3a9af41f6840e91d5d8746062e2f2ef252b83dfb30da
Size

45KB
MD5

c24a202aed55d15cbd5b437483c418f3
SHA1

d714a72c4c76892cb6ffeb3f2d0422f4012dbbab
SHA256

d4fa89ce559b0c06ec7e3a9af41f6840e91d5d8746062e2f2ef252b83dfb30da
SHA512

6c34df5ff5f169f071e58c872624b6cef34c23e7f37a795861c0d0faaa5a5f438d267774cfd11835ae15eb12ca83f445d9665020bf48bed4a9b5895ec293f91c
SSDEEP

768:TYw2XhVoroh+2yv5hGI2Ck8tILsunzC3gPN/UQCkeFkXo96s9lx:Ioroh+pBpYLsOzC3gPNMdkeqoF9b

Score

N/A

Malware Config

Signatures

Files

d4fa89ce559b0c06ec7e3a9af41f6840e91d5d8746062e2f2ef252b83dfb30da
.dll windows x86

e6dfdc82412830f5b6cc3b70e0c5c224

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetVersion
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetProcAddress
VirtualAlloc
TlsAlloc
GetTickCount
GetStringTypeW
GetStringTypeA
LCMapStringW
lstrcmpiA
LCMapStringA
MultiByteToWideChar
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
RtlUnwind

user32

GetClientRect
MessageBoxA

gdi32

Rectangle

shlwapi

StrStrIA

Exports

Exports

VBAScript

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CODEA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CODEB
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6dfdc82412830f5b6cc3b70e0c5c224

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.CODEA Size: 10KB - Virtual size: 10KB

.CODEB Size: 7KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.CODEA
Size: 10KB - Virtual size: 10KB

.CODEB
Size: 7KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB