92fd6a6526494a2c83c11b3628f6f6f726d68a934dc6722d7b4bce12950a1dc7

Sharing

Copy URL Twitter E-mail

General

Target

92fd6a6526494a2c83c11b3628f6f6f726d68a934dc6722d7b4bce12950a1dc7
Size

259KB
MD5

f367799436ffc081575ef22347927780
SHA1

30087968d4af8a406e00d7d066dbe4cc93fd975d
SHA256

92fd6a6526494a2c83c11b3628f6f6f726d68a934dc6722d7b4bce12950a1dc7
SHA512

296a8cb3c27496c5ae0c9469425aa40c0189680830ff8e60d9102ae3da1c3b7ad162e092fca5528d91538b9001f30978864423aa4572da34be96ce8151981acb
SSDEEP

3072:GDrbS47eSbq2aaMZy0nBi3BoE2GTW09Tfln9DdCfL:GDC4d8an3fTh1fl9DdCf

Score

N/A

Malware Config

Signatures

Files

92fd6a6526494a2c83c11b3628f6f6f726d68a934dc6722d7b4bce12950a1dc7
.dll windows x86

4ac16a032ce5650da99759e526e6256a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
GetModuleHandleW
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
LoadResource
LocalFree
LockResource
OpenEventW
GetCurrentThreadId
ReadFile
SetEvent
SetFilePointer
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
GetCurrentProcess
GetCurrentProcessId
GetCommandLineW
FreeResource
FreeLibrary
FindResourceW
ExitProcess
CreateProcessW
CreateEventW
CloseHandle
GetOEMCP
VirtualAlloc
LocalAlloc
GetProcessHeap
CreateFileW
QueryPerformanceCounter
GetStartupInfoA

gdi32

GetStockObject

advapi32

RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueW

msvcrt

_wsplitpath
ctime
memmove
time
_vsnwprintf

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text11
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text10
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ac16a032ce5650da99759e526e6256a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 21KB

.text11 Size: 512B - Virtual size: 199B

.text10 Size: 211KB - Virtual size: 210KB

.rsrc Size: 1024B - Virtual size: 784B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 21KB

.text11
Size: 512B - Virtual size: 199B

.text10
Size: 211KB - Virtual size: 210KB

.rsrc
Size: 1024B - Virtual size: 784B

.reloc
Size: 1KB - Virtual size: 1KB