2805bfa7009eb1d0331171179d2aa1ef87e2da5166391ebf187cb2e7a3eccd7d

Sharing

Copy URL Twitter E-mail

General

Target

2805bfa7009eb1d0331171179d2aa1ef87e2da5166391ebf187cb2e7a3eccd7d
Size

2.8MB
MD5

aced969de0cc8b1539d92e2a0ef2d0eb
SHA1

d5a64b6afc5388c3148ed9e7cc68f10bd005bf7b
SHA256

2805bfa7009eb1d0331171179d2aa1ef87e2da5166391ebf187cb2e7a3eccd7d
SHA512

b998f03857922a13d105c630a1739f5edcf3774c3213d9de8a0058abf59a023e7b4beb683c07a047c7d71a9d46ddaadd7b947ddcc71a713fca5a909a43b686f5
SSDEEP

49152:wYCH/eFnsJT2MatPDyzVHRSVinpn+DULWhNY2CzrGEtTfaft7cFA:GepfwxSSpn+QLWXCzrBE4S

Score

N/A

Malware Config

Signatures

Files

2805bfa7009eb1d0331171179d2aa1ef87e2da5166391ebf187cb2e7a3eccd7d
.dll windows x86

b24ead5bed00aae38870048ff7c08d5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcmpiA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
CreateEventA
Sleep
SetFileAttributesW
GetLastError
CreateDirectoryW
WriteFile
CreateFileA
LoadLibraryA
CreateDirectoryA
GetTempPathA
GetExitCodeProcess
TerminateProcess
ReadFile
CreateFileW
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
VirtualQuery
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
RaiseException
EncodePointer
DecodePointer
HeapFree
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

CheckMenuRadioItem
GetDesktopWindow
IsMenu
GetClassLongA
CallNextHookEx
ArrangeIconicWindows
GetSubMenu
SetWindowsHookExA
GetCaretPos
GetScrollPos
GetDlgItem
GetMenuState
PeekMessageA
GetDlgCtrlID
TranslateMessage
DispatchMessageA
GetSysColor
MsgWaitForMultipleObjectsEx
GetWindowTextLengthA
IsWindowEnabled
UnhookWindowsHookEx
IsIconic
GetWindow
GetMenu
AnyPopup
GetActiveWindow
GetDlgItemInt
GetFocus
AdjustWindowRect

Exports

Exports

asdasd

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b24ead5bed00aae38870048ff7c08d5e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 47KB - Virtual size: 58KB

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 47KB - Virtual size: 58KB

.reloc
Size: 34KB - Virtual size: 34KB