460c431a424dc30a3618b4c203cf8ac728d126142df532caba9d75b6a6f1f02b

Sharing

Copy URL Twitter E-mail

General

Target

460c431a424dc30a3618b4c203cf8ac728d126142df532caba9d75b6a6f1f02b
Size

600KB
MD5

78b80e280fa1a91b17c1b55b3862e780
SHA1

0b34f44e0362b63b2ab3a2ba03ca0d61725d5b59
SHA256

460c431a424dc30a3618b4c203cf8ac728d126142df532caba9d75b6a6f1f02b
SHA512

bedacaeffec469ce68b4126618c4cc04b078fe305d06a070985a826a0027d6e7fb339c54140c4c103aedd1becae1ef8f98667d4aa8367526f9ed9f073bfd60d3
SSDEEP

12288:Hpj913UPuXRzU0QYbq+C2PNiPDbyFZxe2LlL3frDcOGXcLxGJq1:JIPuXu0/NiPDbyFZj3Hb/L

Score

N/A

Malware Config

Signatures

Files

460c431a424dc30a3618b4c203cf8ac728d126142df532caba9d75b6a6f1f02b
.dll windows x86

ffd34700d30207575ab7a8c8cbf02770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
Sleep
UnhandledExceptionFilter
LoadResource
SetUnhandledExceptionFilter
GetCurrentThreadId
GlobalAlloc
QueryPerformanceCounter
InterlockedDecrement
GetDateFormatA
GetSystemTimeAsFileTime
GlobalFree
MultiByteToWideChar
DeleteCriticalSection
CreateEventW
SetEvent
InitializeCriticalSection
TerminateProcess
GetCurrentProcessId
GetModuleHandleA
GetVersionExA
GetModuleHandleW
CreateFileW
CloseHandle
LeaveCriticalSection
InterlockedCompareExchange
GetLastError
InterlockedIncrement
DeviceIoControl
lstrcmpiW
GetModuleFileNameW
LocalFree
WideCharToMultiByte
WaitForSingleObject
RaiseException
GetThreadLocale
LocalAlloc
GetTickCount
InterlockedExchange
EnterCriticalSection
VirtualAlloc
lstrlenW
CreateMutexW
ReadFile

advapi32

CopySid
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

shell32

ShellExecuteW

ole32

CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CoInitialize

oleaut32

UnRegisterTypeLi
SysFreeString
SysAllocString
VarUI4FromStr
SysStringLen
RegisterTypeLi
LoadTypeLi

Exports

Exports

FromFile
GetAttr
GetDefaults
HasKeyString
Int_Fini
IsSubclass
NoMemory
StopIteration
sig_cmp

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffd34700d30207575ab7a8c8cbf02770

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 140KB - Virtual size: 140KB

.rsrc Size: 168KB - Virtual size: 166KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 140KB - Virtual size: 140KB

.rsrc
Size: 168KB - Virtual size: 166KB

.reloc
Size: 12KB - Virtual size: 9KB