a7de4e688bf1b6523b31e21e78223b06c5b4644a9cf5241dd9fad1611d910e3d

Sharing

Copy URL Twitter E-mail

General

Target

a7de4e688bf1b6523b31e21e78223b06c5b4644a9cf5241dd9fad1611d910e3d
Size

1012KB
MD5

fc718da9fbfbdf2497b48608705f89e0
SHA1

2f2fae2d9a5bb75e2ee97d720dece7fb94ded6f0
SHA256

a7de4e688bf1b6523b31e21e78223b06c5b4644a9cf5241dd9fad1611d910e3d
SHA512

a9292dac7fd38b72b27a6225eadde2fca31c90f9cfddbae8f6d086810ee77f7bcecca37693a2ad77957cd6e11fb194b91d40c2c6e984e179631353a2bb2e7b32
SSDEEP

3072:q1oMnvJJVCspYwU7pC8dqA3/pXIS5EnmHAzRvmqSBYRkf6I:SJDCgU7pLdv3/p4CEnmHAzRvNa

Score

N/A

Malware Config

Signatures

Files

a7de4e688bf1b6523b31e21e78223b06c5b4644a9cf5241dd9fad1611d910e3d
.dll windows x86

d0e5c4dd3b55271b70ffe7085f70d0f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetProcessHeap
CreateEventA
GetCurrentProcessId
IsBadReadPtr
GetDateFormatA
GetModuleHandleA
lstrlenW
FormatMessageA
DeleteFileA
lstrcpyA
GetVersionExA
GetStdHandle
GetLocaleInfoA
GetCurrentProcess
LoadLibraryA
EnumCalendarInfoA
VirtualAlloc
FreeLibrary
GetLastError
GetStringTypeA
GetVersion
GetThreadLocale
WideCharToMultiByte
SetFilePointer
GetEnvironmentStrings
LoadLibraryExA
LocalAlloc
WaitForSingleObject
IsBadHugeReadPtr
GlobalAlloc
VirtualFree
SetErrorMode
GetTickCount
GetModuleHandleW
ExitProcess
LoadResource
GetCommandLineW
FindFirstFileA
DeleteCriticalSection
lstrcmpA
GetProcAddress
InitializeCriticalSection
VirtualAllocEx
GlobalDeleteAtom
GetOEMCP
HeapDestroy
LockResource
WriteFile
GetFileSize
ReadFile
GetCurrentThreadId

gdi32

GetDIBColorTable

comctl32

ImageList_Draw
ImageList_Remove
ImageList_DrawEx
ImageList_Add
ImageList_GetBkColor

user32

SetRect
SetPropA
SetParent
IsDlgButtonChecked
SetScrollPos
SetMenuItemInfoA
GetMenu
GetTopWindow
SetScrollInfo
CreateMenu

Exports

Exports

_j52M1
_BPT_eBMqDLr@16
3dhKy@20
_twlxWn_sAMw@4
hk4nV
sc_IN6on
EStHNZNrmU3@12
cqqAySNDn
rs_CWyoRrqU@4
JNgte@20
_gOqcltRgGgT
uZow1KuDF
_T96plCbOFmLO
_I0zNAdks2JWVuT@4
bW5gfLZQWy@4
DdhAg@12
_Gto9EDm@8
_4AUxwtUArI1
X5SnQyPbi@4
SbREKRv8qT@24
_pxXIEe049GM_@24
_WN_aM@24
_1q9mkN4hZ@16
VAymXsw9
_dhTiRg4@16
_8SC_OtY4vip@4
_e9TX9PZkZKLRe2@8
DHhpVK1_X@20
_DZ7mJi
_bLLGKCQQaipu@8
rZLtvMHBfL
TbYo9
_QsmDTrTiIvp
_GPDptv9qs7wi@20
0tSB9z@16
npjKLDg5h5
0GgWXtm2@20
_MhXVn@4
_Ng2nZ@20
aLqMqD1vDD@24
P0Ut35
bMcJytnrL@24
_DbgH_Q@8
_RxPDRKk1y7q@20
b6xTGUR9@12
_MOsjXeupSkhsS4
_niKQWEZqH_f2a
_xkWJJaCLVPsm5
sN3OfM@16
_WjmvxgT8X3m6y
_aXp0qT9AceCu
k9N4f8oSg6eSw
_cYsfkWKxLCNo@16
_Bg5rDgDgki4s@24
_J2NakH62pAk
PAN0RAyLyGI6
_2hnzB66
86xYMIY
dZBKKfv_4
5Pz2xKjIGPQ@4
astZrID0Fwdt@12
FIQ0Yq@12
lX3mBS_@20
crTCaI40m
_n96cXJA1eU@4

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 809KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0e5c4dd3b55271b70ffe7085f70d0f1

Headers

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 809KB - Virtual size: 808KB

.kldata Size: 169KB - Virtual size: 169KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 809KB - Virtual size: 808KB

.kldata
Size: 169KB - Virtual size: 169KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB