a04628e4f2a97eecfd498142af923bcfc94d5aed203edeecf53fe5b69cc553a7

Sharing

Copy URL Twitter E-mail

General

Target

a04628e4f2a97eecfd498142af923bcfc94d5aed203edeecf53fe5b69cc553a7
Size

346KB
MD5

406686a3031a29110a01eb4ef3bd2ab6
SHA1

1385e7973c0e36943891703e52c85a1ca67fefae
SHA256

a04628e4f2a97eecfd498142af923bcfc94d5aed203edeecf53fe5b69cc553a7
SHA512

f7b4edf12e0dd6c74f978094446d7fccbae1f111fde9a1bea8178fe6fb772047d3a9e1bb948cc2a714363c59f4b8fe28298e7c5c0ee066d9db28a36a8fd52e9c
SSDEEP

6144:Y3cVRcMkjyzWqhE5fsArAgZdbY0SHRJIBpE8eFU2d61iyzn6uLQolOlrlF9VW:WXqatYC3E840Xn6uco0Zb9VW

Score

N/A

Malware Config

Signatures

Files

a04628e4f2a97eecfd498142af923bcfc94d5aed203edeecf53fe5b69cc553a7
.dll windows x86

aebcd193f51ef0609a091a0191d6b6a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHExtractIconsW
SHChangeNotify
DragQueryPoint
SHLoadInProc
DragQueryFileA

kernel32

IsDBCSLeadByte
lstrlenA
lstrcpynA
lstrcmpA
WaitForMultipleObjectsEx
VirtualProtect
CancelDeviceWakeupRequest
DeleteTimerQueueTimer
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
VirtualFree
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
Module32First
MulDiv
MultiByteToWideChar
ProcessIdToSessionId
PurgeComm
QueryPerformanceCounter
SetPriorityClass
SetSystemTime
VirtualAlloc

version

VerFindFileA
VerFindFileW
GetFileVersionInfoA

netapi32

NetRenameMachineInDomain

security

EncryptMessage
SealMessage
RevertSecurityContext
FreeContextBuffer
CompleteAuthToken

Exports

Exports

CompileShaderFromResourceA
CreateMeshFVF
GetLoadInfoCallbackData
LoadBitmapW
SavePRTCompBufferToFileW
UVAtlasPack
mpegSplitSeekByteTS

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aebcd193f51ef0609a091a0191d6b6a5

Headers

File Characteristics

Imports

shell32

kernel32

version

netapi32

security

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 173KB - Virtual size: 172KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 173KB - Virtual size: 172KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 3KB - Virtual size: 2KB