37bb535da36ec8976478c1782867729f8901e82d935deb3ad5e26e05bad080c6

Sharing

Copy URL Twitter E-mail

General

Target

37bb535da36ec8976478c1782867729f8901e82d935deb3ad5e26e05bad080c6
Size

68KB
MD5

5fac4612a13205bd137c9908330cb210
SHA1

47f27e8bac0797517aa1e1db91516f6851798bec
SHA256

37bb535da36ec8976478c1782867729f8901e82d935deb3ad5e26e05bad080c6
SHA512

b2ee45d2b9e4d547b26f18928dd02a411dc784cc24d17b0bd1892a0c47aae2d3d660af74b37c2c649fb68d0f3b045ebe08f22c1fb0ecc9fd38a8ead4a30a74d9
SSDEEP

768:aDoaPLoRHHhELf6b75KR860Qk4OkBYCkwGlL5h3LVwd1B7:taPLoRHHh6Q7m8FR2YlZLVwdP

Score

N/A

Malware Config

Signatures

Files

37bb535da36ec8976478c1782867729f8901e82d935deb3ad5e26e05bad080c6
.dll windows x86

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExA
GetModuleHandleA
GetProcAddress
SetEvent
OpenEventA
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcessId

user32

ActivateKeyboardLayout
DefWindowProcA
PostMessageA
IsWindow
CreateWindowExA
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ShowWindow

msvcrt

_adjust_fdiv
malloc
_initterm
free
sprintf

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

g(PTS%hV
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$5:JB"la
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NI<vl$L*
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

"pI(Nxqm
Size: 4KB - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

X>o!v>6d
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LW6:&?f
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

g(PTS%hV Size: 8KB - Virtual size: 4KB

0Yuj<kIr Size: 4KB - Virtual size: 1KB

$5:JB"la Size: 4KB - Virtual size: 588B

NI<vl$L* Size: 4KB - Virtual size: 528B

"pI(Nxqm Size: 4KB - Virtual size: 298B

X>o!v>6d Size: 36KB - Virtual size: 34KB

LW6:&?f Size: 4KB - Virtual size: 104B

g(PTS%hV
Size: 8KB - Virtual size: 4KB

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

$5:JB"la
Size: 4KB - Virtual size: 588B

NI<vl$L*
Size: 4KB - Virtual size: 528B

"pI(Nxqm
Size: 4KB - Virtual size: 298B

X>o!v>6d
Size: 36KB - Virtual size: 34KB

LW6:&?f
Size: 4KB - Virtual size: 104B