ada439b52ed5effc633d7f306aa23cfc0ad62d0663c731b7804b12e9ca38e5c2

General

Target

ada439b52ed5effc633d7f306aa23cfc0ad62d0663c731b7804b12e9ca38e5c2
Size

79KB
MD5

60a52379373ebd73f98161f528252fe3
SHA1

fae8c15b0987dccebc5cc03e0fed3d8147e401c0
SHA256

ada439b52ed5effc633d7f306aa23cfc0ad62d0663c731b7804b12e9ca38e5c2
SHA512

84ba32437aad013bbb1845ce886856b0e91c9a10094e7a6cb6a8bb092ad00e2f734ae752df940f8a9aef3e5e503e7b97ad08cf0b06a6f4cfbf65d158663d80f2
SSDEEP

1536:e1gPIVBFygC0pXGFQq7PPHoZuDIOlIOenToIfq5O0:wBF1JpXGFnUZulv6TBfq5J

Score

N/A

Malware Config

Signatures

Files

ada439b52ed5effc633d7f306aa23cfc0ad62d0663c731b7804b12e9ca38e5c2
.dll windows x86

171cf5d74e3fa67246f96e64b71f076c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
LoadLibraryW
GetProcAddress
GetWindowsDirectoryW
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers

user32

CallNextHookEx
SetWindowsHookExW
wsprintfW

Exports

Exports

SetHook

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

171cf5d74e3fa67246f96e64b71f076c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 4KB