302ed830a01435c0e61d60cffa8d29d005811718ec289676d56f00023e350d57

Sharing

Copy URL Twitter E-mail

General

Target

302ed830a01435c0e61d60cffa8d29d005811718ec289676d56f00023e350d57
Size

475KB
MD5

42ac50617384ed63a385a12c49391973
SHA1

00f7cf91a8e07da98b44e61cd2f17e9ad66dd26a
SHA256

302ed830a01435c0e61d60cffa8d29d005811718ec289676d56f00023e350d57
SHA512

031f7194e8138b40de7b5cf25bad858f2fffeb657dbe918e7c46f242b3eca5e387ad925017de0427bad947b860fd73b183adf26782b614103c1dd393f07f79fa
SSDEEP

12288:xHUpPoEQfSZfo2L1xEC+BALhiOEukkRUQ:4jQIlLHUOLQOEukk7

Score

N/A

Malware Config

Signatures

Files

302ed830a01435c0e61d60cffa8d29d005811718ec289676d56f00023e350d57
.dll windows x86

e0385e6ba2dc5636908010f51c9bffc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
Heap32First
LoadLibraryA
LoadModule
LocalFileTimeToFileTime
QueryPerformanceCounter
ReadFile
SetLastError
SetTapePosition
GetVersionExA
Sleep
TerminateProcess
UnhandledExceptionFilter
VerSetConditionMask
VirtualAlloc
WaitForSingleObject
lstrlenA
GetTickCount
GetSystemDirectoryA
GetStartupInfoA
GetProcessPriorityBoost
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
GetCommState
GetCommConfig
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
CreateProcessA
CopyFileA
ContinueDebugEvent
CloseHandle
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW
SHGetDiskFreeSpaceA
DragQueryPoint

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
QueryServiceStatus
OpenServiceA
OpenProcessToken
NotifyBootConfigStatus
LsaGetSystemAccessAccount
LsaCreateTrustedDomain
LookupPrivilegeValueA
GetTokenInformation
GetSidLengthRequired
GetSidIdentifierAuthority
EqualSid
DestroyPrivateObjectSecurity
CryptGetUserKey
ControlService
AllocateAndInitializeSid
AddAuditAccessAceEx
SetThreadToken
SystemFunction001
SystemFunction030
RegSetValueExA

user32

AdjustWindowRect
BlockInput
CheckRadioButton
DispatchMessageA
DrawIcon
EnableWindow
EnumThreadWindows
EnumWindows
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FrameRect
GetWindowRect
IsWindow
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
PtInRect
ScrollWindowEx
SendMessageA
SetForegroundWindow
SetThreadDesktop
ShowScrollBar
TranslateMessage

msvcrt

_CIexp
_XcptFilter
__CxxFrameHandler
__dllonexit
__getmainargs
__p___wargv
__p__amblksiz
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_scalb
_setmbcp
_strnicmp
_strupr
exit
exp
getchar
sprintf
sqrt
strcspn
strncpy
strstr

Exports

Exports

EvalFrame
Instance_NewRaw
InteractiveOne
Number_Divmod
SyntaxWarning
set_sPLT

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0385e6ba2dc5636908010f51c9bffc8

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

user32

msvcrt

Exports

Exports

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 211KB - Virtual size: 211KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 211KB - Virtual size: 211KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 5KB - Virtual size: 5KB