2a4a8e6d14614496fb93cef74ac4d05982604becef10836ea61fcb156c5d262b

Sharing

Copy URL Twitter E-mail

General

Target

2a4a8e6d14614496fb93cef74ac4d05982604becef10836ea61fcb156c5d262b
Size

245KB
MD5

e3ba1ecbe212c3d51b81dd8bddcc6823
SHA1

5be78f8e41b43f0138939ddac448c35d135db3f3
SHA256

2a4a8e6d14614496fb93cef74ac4d05982604becef10836ea61fcb156c5d262b
SHA512

ca14d8ea71f4facc5bcd3684172c3184f4268e950ec926184ba852317f412819767cc471654881564f3f408e6da3100d22ea1635c646d01bd4f052bd1018257b
SSDEEP

6144:lVKykl8Asp/Mt72pLQeeaQeelQeesQeeq4QeehQeeAgDIHsM:lp+j0ZJWs

Score

N/A

Malware Config

Signatures

Files

2a4a8e6d14614496fb93cef74ac4d05982604becef10836ea61fcb156c5d262b
.dll windows x86

886fd89f6edaf13d01e7b967e9651209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
GetModuleHandleW
DisableThreadLibraryCalls
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
CloseHandle
LoadLibraryA
Sleep
GetProcAddress
GetVersionExA
VirtualProtect
MulDiv
IsProcessorFeaturePresent
GetModuleHandleA
OutputDebugStringA
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
EnterCriticalSection
ReadProcessMemory

user32

GetAsyncKeyState

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

886fd89f6edaf13d01e7b967e9651209

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 197KB - Virtual size: 197KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 21KB - Virtual size: 49KB

.sxdata Size: 512B - Virtual size: 8B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 197KB - Virtual size: 197KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 21KB - Virtual size: 49KB

.sxdata
Size: 512B - Virtual size: 8B

.reloc
Size: 10KB - Virtual size: 9KB