8f91286a57f237c2aaad4d0e9ce3241e59c6be460d57e006b9f2d06d8eaedca5

General

Target

8f91286a57f237c2aaad4d0e9ce3241e59c6be460d57e006b9f2d06d8eaedca5
Size

548KB
MD5

03ca7ddc13cb1cb221577b3b634fc424
SHA1

27db067e87e98b09f7e5f21fd4e10db4936c87cc
SHA256

8f91286a57f237c2aaad4d0e9ce3241e59c6be460d57e006b9f2d06d8eaedca5
SHA512

3b7965acedcf1b72e4d001fff2fd5599d28890f10f215f28a17f9ad3710ac80c0b3f139bd0189d31ce13448ad1642cc258b5931f041a2d479b275cfee16f4e05
SSDEEP

6144:VLfLxenUjrLZIZrWVUXJxprZdpro0W3USTj3iHpkJxj47h7XaDNmK2mYoSKMj8Z7:5tLQrDJxpdXrHTHpknO8TkKo8Za

Score

N/A

Malware Config

Signatures

Files

8f91286a57f237c2aaad4d0e9ce3241e59c6be460d57e006b9f2d06d8eaedca5
.dll windows x86

66624a02b949b0b309022f89feba7349

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

kernel32

SetStdHandle
GetConsoleMode
GetConsoleCP
RaiseException
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetUnhandledExceptionFilter
GetCPInfo
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
lstrcmpW
GetTempPathW
GetLocalTime
GetVersionExW
CreateFileW
SetFilePointer
CloseHandle
VerSetConditionMask
VerifyVersionInfoW
GetPrivateProfileIntW
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoA
HeapSize
WriteConsoleA
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FlushFileBuffers
HeapReAlloc

advapi32

EqualDomainSid
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

Exports

Exports

lxhankl

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66624a02b949b0b309022f89feba7349

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 50KB

.data Size: 494KB - Virtual size: 494KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 51KB - Virtual size: 50KB

.data
Size: 494KB - Virtual size: 494KB

.reloc
Size: 2KB - Virtual size: 1KB