8e158ae443c5a405a0982c81ac974d87cd167ea7138157a3f4b07810bf4451db

Sharing

Copy URL Twitter E-mail

General

Target

8e158ae443c5a405a0982c81ac974d87cd167ea7138157a3f4b07810bf4451db
Size

582KB
MD5

cf6d5ff818b5f805130db9ae1dbdfe15
SHA1

7c9e29f5cc8b7f8d3064af660b291265162cc167
SHA256

8e158ae443c5a405a0982c81ac974d87cd167ea7138157a3f4b07810bf4451db
SHA512

ed554db4adf14837f07c5665d98c1c652dbf6aa90568e0365e9f44f9abaa41b2a5c631d6419c7557fad85abc3e0648342b89b7e2012835952c9bc23874a636f9
SSDEEP

12288:WFfK13PMJMWFrGih7aeuwLluMklymB5v:WFC13PuMAQwLlwlJP

Score

N/A

Malware Config

Signatures

Files

8e158ae443c5a405a0982c81ac974d87cd167ea7138157a3f4b07810bf4451db
.dll windows x86

99c5d365847477f2a3929e9621cd3ba0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
IsWindow
LoadStringA
RegisterWindowMessageA
MessageBoxA

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
UtGetDvtd32Info
CoCreateInstance

kernel32

lstrlenA
lstrcpyA
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
DeviceIoControl
DisableThreadLibraryCalls
FreeEnvironmentStringsA
FreeLibrary
GetConsoleFontSize
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetExitCodeThread
GetFileSize
GetFileTime
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
SetFilePointer
SetSystemPowerState
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateProcess
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualAlloc
WaitForSingleObject
WritePrivateProfileSectionA
lstrcatA
lstrcmpA

winmm

midiOutShortMsg
waveOutReset
midiOutGetDevCapsA
midiOutClose
midiOutReset
midiOutOpen

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

Exports

Exports

EvalCode
InPlaceRemainder
IsSubclass
Realloc
SaveThread
SyntaxError
Values
_DelItem
get_rows

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99c5d365847477f2a3929e9621cd3ba0

Headers

File Characteristics

Imports

user32

ole32

kernel32

winmm

advapi32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 354KB - Virtual size: 354KB

.data Size: 106KB - Virtual size: 106KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 354KB - Virtual size: 354KB

.data
Size: 106KB - Virtual size: 106KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 4KB