affebb160195e7eeba53e8a27ea28afd9f580ba3a08ca9689872d23f112f6251

Sharing

Copy URL

Twitter E-mail

General

Target

affebb160195e7eeba53e8a27ea28afd9f580ba3a08ca9689872d23f112f6251
Size

120KB
MD5

d545f1de64b1b2cf1b2f78075e0f5261
SHA1

48e8a5c2e22bfb4d8e82b96ebc73d22856e33e58
SHA256

affebb160195e7eeba53e8a27ea28afd9f580ba3a08ca9689872d23f112f6251
SHA512

b101786ea4d04cbe45fac486bb414f0caba1f693b1ae5df4daf37fbfb285e8f9f8c7aa046a53d374a5e0d561453056362f57fc820e869a77a44897a497e48b1f
SSDEEP

3072:p1F2q93tDBv8Uob+1WeCH4P2lTpavx19url5LqqtnL0:p10q93tlkUob+sDgvuPXtnL0

Score

N/A

Malware Config

Signatures

Files

affebb160195e7eeba53e8a27ea28afd9f580ba3a08ca9689872d23f112f6251
.dll windows x86

e3d2053c43b9921de509e31280e3bca9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueA
RegDeleteValueA
GetSecurityDescriptorControl
RegQueryValueExA
RegQueryInfoKeyA
LookupPrivilegeValueA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExW

kernel32

IsValidLocale
LoadLibraryA
GetModuleHandleA
GetHandleInformation
GetProcAddress
ExitProcess
lstrcmpiW
lstrcpynA
SetCurrentDirectoryA
CreateMutexW
GetShortPathNameW
SetFilePointer
ResumeThread
GetShortPathNameA
GetVersionExW
GetThreadTimes
GetTempFileNameW
LoadLibraryW
GetTempFileNameA
DeleteCriticalSection
ExpandEnvironmentStringsA
GetStringTypeW
lstrcmpW
CreateEventW
IsBadWritePtr
SystemTimeToFileTime
GetFileSize
HeapDestroy
LocalFree
GetProcessHeap
SearchPathW
GetFileType
GetVersion
GetSystemInfo
InterlockedIncrement
InterlockedExchange
GlobalFree
LCMapStringW
GetModuleFileNameA
CreateFileW
WriteConsoleA
lstrcpynW
ResetEvent
SetErrorMode
SuspendThread
HeapSize
VirtualAlloc
GetSystemTime
HeapAlloc
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
VirtualFree
HeapFree
FatalAppExitA
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeA
RtlUnwind

Exports

Exports

PMJQTOP

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3d2053c43b9921de509e31280e3bca9

Headers

File Characteristics

Imports

advapi32

kernel32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 55KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 55KB

.reloc
Size: 8KB - Virtual size: 6KB