30e5e65c28fa7aa6020128be91b0513cf2208ffccfa7298aaf2e40b02b657065

Sharing

Copy URL Twitter E-mail

General

Target

30e5e65c28fa7aa6020128be91b0513cf2208ffccfa7298aaf2e40b02b657065
Size

404KB
MD5

df24e0366adf247b4f68437ee7e88080
SHA1

3b9ef45c5a51eceae8f0acc85b0f513423ce62bc
SHA256

30e5e65c28fa7aa6020128be91b0513cf2208ffccfa7298aaf2e40b02b657065
SHA512

190959f5d89e7d7a05ef9e1807c56eaffcbc4b136bd4e8eb11eedd5251bb0ea11e270f421aecef2799a5b22e7bfd2f5852935fea34ca475152c85c47ef53fcef
SSDEEP

6144:N14RDW9wECAd/W2dLTuxq6Vf+ZWHpNiIf3GhBwBsAmxeJvTOLAsltdC:NI69wE1/tLixCK+BHvAsl

Score

N/A

Malware Config

Signatures

Files

30e5e65c28fa7aa6020128be91b0513cf2208ffccfa7298aaf2e40b02b657065
.dll windows x86

eebcf4ed1d60670e8e98c137c9a41636

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW

ole32

CoUninitialize
CoTaskMemRealloc
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc
CoInitialize

kernel32

GetModuleHandleA
GetCurrentThreadId
FreeLibrary
DeviceIoControl
GlobalAlloc
GetVersionExA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GlobalFree
UnhandledExceptionFilter
ReadFile
LocalFree
WideCharToMultiByte
lstrlenW
CloseHandle
CreateFileW
GetCurrentProcessId
WaitForSingleObject
InterlockedCompareExchange
GetDateFormatA
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
VirtualAlloc
InterlockedExchange
Sleep
MultiByteToWideChar
GetThreadLocale
GetLastError
CreateMutexW
SetEvent
RaiseException
GetTickCount
EnterCriticalSection
CreateEventW
DeleteCriticalSection
SetUnhandledExceptionFilter
LoadResource
lstrcmpiW
GetModuleFileNameW
TerminateProcess
InitializeCriticalSection
InterlockedDecrement

oleaut32

SysStringLen
SysAllocString
LoadTypeLi
SysFreeString
VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi

advapi32

RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
GetTraceEnableLevel
RegQueryInfoKeyW

Exports

Exports

AttributeError
FastToLocals
Member1_Get
set_read_fn
vGetFile

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eebcf4ed1d60670e8e98c137c9a41636

Headers

File Characteristics

Imports

shell32

ole32

kernel32

oleaut32

advapi32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 68KB - Virtual size: 66KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 68KB - Virtual size: 66KB

.reloc
Size: 12KB - Virtual size: 9KB