146f1ebc8a2452b368dfcc1105131c715db7aa5985d36d8b91b0ea3708c0d7d1

Sharing

Copy URL Twitter E-mail

General

Target

146f1ebc8a2452b368dfcc1105131c715db7aa5985d36d8b91b0ea3708c0d7d1
Size

332KB
MD5

2687158e9711bbbea314b34aa8c7df7f
SHA1

e6d7dd6e1c007f850f2276a8d17211d4c6276877
SHA256

146f1ebc8a2452b368dfcc1105131c715db7aa5985d36d8b91b0ea3708c0d7d1
SHA512

c8aba4a3c6b00b9cc172434a1a573d47fb47eff677888bd4a489d09480b623a08152f52851efc1e7a7e5754ee866d8e230313cfdfa1b280132a488c385fe71e2
SSDEEP

6144:csWciyYKgfOaCixdhvY+0+CtYaWvLL79KwuhsJNK7uDar5S5:PWT1Y+nLP9KwuhZg

Score

N/A

Malware Config

Signatures

Files

146f1ebc8a2452b368dfcc1105131c715db7aa5985d36d8b91b0ea3708c0d7d1
.dll windows x86

aebcd193f51ef0609a091a0191d6b6a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHExtractIconsW
SHChangeNotify
DragQueryPoint
SHLoadInProc
DragQueryFileA

kernel32

IsDBCSLeadByte
lstrlenA
lstrcpynA
lstrcmpA
WaitForMultipleObjectsEx
VirtualProtect
CancelDeviceWakeupRequest
DeleteTimerQueueTimer
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
VirtualFree
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
Module32First
MulDiv
MultiByteToWideChar
ProcessIdToSessionId
PurgeComm
QueryPerformanceCounter
SetPriorityClass
SetSystemTime
VirtualAlloc

version

VerFindFileA
VerFindFileW
GetFileVersionInfoA

netapi32

NetRenameMachineInDomain

security

EncryptMessage
SealMessage
RevertSecurityContext
FreeContextBuffer
CompleteAuthToken

Exports

Exports

ComputeTangentFrameEx
CreateCubeTextureFromResourceExW
GatherFragmentsFromFileA
LoadMemoryTile
LoadMeshHierarchyFromXA
StartDecompressBuffer
StopSaveData
Vec2TransformCoordArray
mpegInSeekFrame

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aebcd193f51ef0609a091a0191d6b6a5

Headers

File Characteristics

Imports

shell32

kernel32

version

netapi32

security

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 146KB - Virtual size: 146KB

.data Size: 63KB - Virtual size: 63KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 146KB - Virtual size: 146KB

.data
Size: 63KB - Virtual size: 63KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 4KB - Virtual size: 3KB