8ec38be2897a6fdae38ed0be4e938d7a0beb6634ac3b42dd816dd5aaab8d046d

Sharing

Copy URL Twitter E-mail

General

Target

8ec38be2897a6fdae38ed0be4e938d7a0beb6634ac3b42dd816dd5aaab8d046d
Size

396KB
MD5

508833be3a32335e9436398a54c206c0
SHA1

d1b875c70b4f0ddd7b5ce29150ed18ff629a57d7
SHA256

8ec38be2897a6fdae38ed0be4e938d7a0beb6634ac3b42dd816dd5aaab8d046d
SHA512

03594a4039fced258666b440109d3004f543905bd04b351372ae8a71bc4711b059dc56ba364107c99edf890988e2cfe1e6702f05a715190f8b41898df28522e0
SSDEEP

1536:pTRVq3jc+JKifPr5RgbLEk5Ur+/6mt3ePBzTFakdkiQVT/cAYJmy2gzvAIHew:VRw3jpJRLIbBqr+APFTFaxDVTOcJdIHr

Score

N/A

Malware Config

Signatures

Files

8ec38be2897a6fdae38ed0be4e938d7a0beb6634ac3b42dd816dd5aaab8d046d
.dll windows x86

1bf5e43572ffe123a80f9203e3ee65df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
lstrcpynA
Sleep
GetModuleHandleA
WideCharToMultiByte
IsBadReadPtr
LeaveCriticalSection
TryEnterCriticalSection
IsBadWritePtr
lstrcmpiA
lstrcpyA
HeapValidate
HeapSize
HeapReAlloc
GetLastError
CreateThread
WaitForSingleObject
SetEvent
lstrcatA
CreateEventA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CloseHandle
GetSystemDirectoryA
VirtualFree
VirtualAlloc
GetModuleFileNameA
lstrcpynW
GetCurrentProcessId
OpenMutexA
CreateMutexA
DeleteFileA
GetExitCodeThread
lstrcmpA
GetProcAddress
lstrlenW
lstrlenA
ExitProcess
LoadLibraryA
GetCurrentProcess
VirtualProtect
CreateToolhelp32Snapshot
VirtualQuery
DisableThreadLibraryCalls
GetThreadContext
OpenThread
Thread32Next
Thread32First
SetThreadContext
EnterCriticalSection
CreateFileA
MapViewOfFile
CreateFileMappingA
GetFileSize
UnmapViewOfFile
ReadFile
SetFilePointer
GetProcessHeap
GetCommandLineA
HeapAlloc

msvcrt

asin
strcat
_except_handler3

Exports

Exports

LpkPresent
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontProperties
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptJustify
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptShape
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bf5e43572ffe123a80f9203e3ee65df

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 78KB - Virtual size: 78KB

.data Size: 15KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 78KB - Virtual size: 78KB

.data
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB