0260dead12b3b3fc6ebdf4f07c3c7097dfb91a2d9183bbf51ed3992d4dd9ae8d

Sharing

Copy URL Twitter E-mail

General

Target

0260dead12b3b3fc6ebdf4f07c3c7097dfb91a2d9183bbf51ed3992d4dd9ae8d
Size

92KB
MD5

eb40bf6a0f70c405b3f0ed109d6afc98
SHA1

3845b9c533e825b8bab89d3a6ab2159acd685199
SHA256

0260dead12b3b3fc6ebdf4f07c3c7097dfb91a2d9183bbf51ed3992d4dd9ae8d
SHA512

52d9fba839ce61214e0e86fd2b088c2a0b60683bd3970944a766ffbdee5f3488960e8e978deef894e33b79b8585c6b13c0c2c95548acc4d0cf01d2a46be79f31
SSDEEP

1536:rUpx5dCx0soFBVdADftLL8WgurvouTfzkRZ6r3ItJqoSH:rUpx5dCxtoFBV0LgEoVGr3ItJqoS

Score

N/A

Malware Config

Signatures

Files

0260dead12b3b3fc6ebdf4f07c3c7097dfb91a2d9183bbf51ed3992d4dd9ae8d
.dll windows x86

d693c55f26fc72adc133cb6918de980b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscms

OpenColorProfileA
GetColorProfileFromHandle
GetColorProfileElement
CloseColorProfile

kernel32

GetModuleFileNameA
FreeLibrary
LoadLibraryA
GetProcAddress
FindClose
FindNextFileA
FindFirstFileA
GetUserDefaultLCID
lstrlenA
CloseHandle
CreateFileA
WriteFile
SetFilePointer
GetFileSize
DeleteFileA
CopyFileA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
GetDiskFreeSpaceA
GetModuleHandleA
GetTickCount
GlobalHandle
GetTempFileNameA
lstrcpyA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
lstrcatA
IsDBCSLeadByte
HeapReAlloc
VirtualAlloc
ExitProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr

user32

GetSystemMetrics
DialogBoxParamA
SetWindowLongA
CheckDlgButton
SetTimer
KillTimer
CharNextA
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
GetWindowRect
MessageBoxA
GetDesktopWindow
SendDlgItemMessageA
SetWindowPos
GetWindowLongA
EndDialog
LoadStringA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

EPScanEntry

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d693c55f26fc72adc133cb6918de980b

Headers

File Characteristics

Imports

mscms

kernel32

user32

advapi32

version

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 800B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 800B

.reloc
Size: 8KB - Virtual size: 4KB