a6d3f9389b6940927cafb15be8b3a3315f4b7bdb6ac74e9cd59e23503c8ffdda

General

Target

a6d3f9389b6940927cafb15be8b3a3315f4b7bdb6ac74e9cd59e23503c8ffdda
Size

72KB
MD5

d4e5f07aa17362b5e3e940be71fe916b
SHA1

72011b32f7eed707ad2093c9ca91af29787f925b
SHA256

a6d3f9389b6940927cafb15be8b3a3315f4b7bdb6ac74e9cd59e23503c8ffdda
SHA512

f3e0906216c09c524b88efaac0647c806d55b98654fa53737ce3114fd970f89ce4077ded60dddf4aba3b0edc0e320318470d796c26c17b7163f462bc5634462c
SSDEEP

1536:mJY+rWXIVChDiMTu3B7jTgqHj4JoDlcv+z:mUpingWkJoDlc

Score

N/A

Malware Config

Signatures

Files

a6d3f9389b6940927cafb15be8b3a3315f4b7bdb6ac74e9cd59e23503c8ffdda
.dll windows x86

9e2cff09ce3e10a819a792f74f225db7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleFileNameA
MoveFileWithProgressW
DeleteFileW
GetWindowsDirectoryW
GetTickCount
CloseHandle
SetFileTime
GetFileTime
CreateFileW
CreateProcessW
GetEnvironmentVariableW
GetVersionExW
OpenProcess
VirtualFreeEx
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
FreeLibrary
WaitForSingleObject
CreateRemoteThread
GetProcAddress
LoadLibraryW
GetStringTypeW
GetStringTypeA
GetLastError
CreateDirectoryW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
ReadFile
InitializeCriticalSection
HeapFree
WriteFile
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
SetStdHandle
SetFilePointer
CreateFileA
VirtualAlloc
HeapReAlloc
RtlUnwind
FlushFileBuffers
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile

user32

CreateDesktopW

psapi

EnumProcessModules
GetModuleBaseNameW
EnumProcesses

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e2cff09ce3e10a819a792f74f225db7

Headers

File Characteristics

Imports

kernel32

user32

psapi

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 32KB - Virtual size: 40KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 32KB - Virtual size: 40KB

.reloc
Size: 4KB - Virtual size: 3KB