44f933fd537ec1540e50bbe238353fffc57365f4f36493de550d7ed9bddfa668

Sharing

Copy URL Twitter E-mail

General

Target

44f933fd537ec1540e50bbe238353fffc57365f4f36493de550d7ed9bddfa668
Size

80KB
MD5

8ef2460c2640d65a19b6365dc6d44d0e
SHA1

fe413c784ff1afce31e7551261729d84e798d036
SHA256

44f933fd537ec1540e50bbe238353fffc57365f4f36493de550d7ed9bddfa668
SHA512

5a1e7f60cdc67871e16258da37f4a51744f89318be4ac4211141eee8e9106e926e9d33efd46d1fffaac8c9c07129a92dfd59a306a213cf461d7ccdcda930f8be
SSDEEP

1536:R/zqfZlgZHQX81ZcPyIvaukDdNkrPdaxrBJSoUg08jg1ZXomb8:R7kgesTcPslNkrlaxyoUB8c1ZP

Score

N/A

Malware Config

Signatures

Files

44f933fd537ec1540e50bbe238353fffc57365f4f36493de550d7ed9bddfa668
.dll windows x86

888ecd90c052237d9842edec2aad2e9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WideCharToMultiByte
CloseHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

Sections

.text
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccfc0
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ccfc1
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ccfc2
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

888ecd90c052237d9842edec2aad2e9a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: - Virtual size: 38KB

.rdata Size: - Virtual size: 3KB

.data Size: - Virtual size: 19KB

.ccfc0 Size: - Virtual size: 3KB

.ccfc1 Size: - Virtual size: 18KB

.ccfc2 Size: 72KB - Virtual size: 68KB

.reloc Size: 4KB - Virtual size: 152B

.text
Size: - Virtual size: 38KB

.rdata
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 19KB

.ccfc0
Size: - Virtual size: 3KB

.ccfc1
Size: - Virtual size: 18KB

.ccfc2
Size: 72KB - Virtual size: 68KB

.reloc
Size: 4KB - Virtual size: 152B