437954b51014f2ac456059e380ab0211d6837e080eb2adb64afe0474cd8d5765

General

Target

437954b51014f2ac456059e380ab0211d6837e080eb2adb64afe0474cd8d5765
Size

76KB
MD5

ede118fbf937582fce69ae7a30e17e22
SHA1

5dc9f410b683b2dc04d95899ec7708fc0cf7d708
SHA256

437954b51014f2ac456059e380ab0211d6837e080eb2adb64afe0474cd8d5765
SHA512

6d68487f6ba98c74f81e54f2ed9ae8e30cec74e045748f0e3e224fd0e2d6d0fbcd913c569279a2a3f1b528310f184f36628dde7af5ebc958e8a6db3d46bb4cb1
SSDEEP

1536:fay+8eZ0KIR7CmlpNrqJ8/lNYuj1gNSt0Q73+sOOTOXDRLl/BF/:faXDIwuCSfj1gNStL73+bOTIRbt

Score

N/A

Malware Config

Signatures

Files

437954b51014f2ac456059e380ab0211d6837e080eb2adb64afe0474cd8d5765
.dll windows x86

50c7c876e75021ec70d5dc06722c2076

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
GetEnvironmentStringsW
TerminateProcess
FreeEnvironmentStringsA
IsBadCodePtr
GetTickCount
IsBadWritePtr
IsBadReadPtr
InterlockedExchangeAdd
EnterCriticalSection
DeleteCriticalSection
SetEvent
CreateTimerQueueTimer
HeapDestroy
QueryPerformanceCounter
GetFileType
GetLocaleInfoA
SetLastError
GetModuleFileNameA
WaitForMultipleObjects
HeapFree
DisconnectNamedPipe
UnmapViewOfFile
CreateNamedPipeA
GetCurrentProcessId
GetCPInfo
SetUnhandledExceptionFilter
InitializeCriticalSection
LeaveCriticalSection
DeleteTimerQueueTimer
GetACP
GetEnvironmentStrings
GetStdHandle
InterlockedCompareExchange
LCMapStringA
ReleaseMutex
WaitForSingleObject
InterlockedExchange
GetSystemInfo
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
ResetEvent
WriteFile
OpenProcess
LCMapStringW
HeapAlloc
CreateMutexW
CreateEventA
WideCharToMultiByte
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedDecrement
GetStartupInfoA
GetOEMCP
ConnectNamedPipe
FreeEnvironmentStringsW
lstrcpyW
GetLastError
DuplicateHandle
RtlUnwind
GetVersionExA
UnhandledExceptionFilter

user32

DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

tqrtdeph

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50c7c876e75021ec70d5dc06722c2076

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.data Size: 16KB - Virtual size: 46KB

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 1024B - Virtual size: 684B

.text
Size: 57KB - Virtual size: 56KB

.data
Size: 16KB - Virtual size: 46KB

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 1024B - Virtual size: 684B