8bcd85bb1ae60d37de9c34033af1269fd58b987722d518a98c9ba33986450be2

Sharing

Copy URL Twitter E-mail

General

Target

8bcd85bb1ae60d37de9c34033af1269fd58b987722d518a98c9ba33986450be2
Size

105KB
MD5

d399d704df806607c986c8acd627f7fb
SHA1

62342eb5ada404af1813d00d18f51a7792137f07
SHA256

8bcd85bb1ae60d37de9c34033af1269fd58b987722d518a98c9ba33986450be2
SHA512

68b1399347cc41f7c731f65fe55a55a3aca99b262c9c7461f05ba65f9ca01bf3ddd4780750cdbbe4d059730416d76a07cd3215b9b59f69a3bb9780a79aa6473e
SSDEEP

1536:MqWQt0BpecUFOeLClMY/C75dBU5aN2ejDAJHrXeEaMRfJa1Q+vpVCqX+ai:MVzecCOIC2Y/C7nWmPwHSETRffApya

Score

N/A

Malware Config

Signatures

Files

8bcd85bb1ae60d37de9c34033af1269fd58b987722d518a98c9ba33986450be2
.dll windows x86

628f9c862417a5f78e02ee17cf48bbb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrlenA
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
WriteFile
GlobalFree
ReadFile
CompareStringW
MulDiv
GetLocaleInfoW
GetNumberFormatW
FreeLibrary
FormatMessageW
lstrcmpiW
CloseHandle
GetLocalTime
SetLastError
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
lstrlenW
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
HeapAlloc
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetSystemTime
GetVersion
GetFileAttributesW
GetProcAddress
LoadLibraryW
GetModuleHandleA
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
WideCharToMultiByte
GetLastError
VirtualProtect
GetCommandLineA
VirtualFree
SystemTimeToFileTime
VirtualAlloc

user32

RemovePropW
RegisterClassW
GetDC
ShowWindow
SetFocus
SetRect
InvalidateRect
GetSysColor
GetWindowRect
GetClientRect
CreateWindowExW
PostMessageW
SendMessageW
GetDlgItem
ReleaseDC
FillRect
CreatePopupMenu
InsertMenuItemW
UnionRect
IsDlgButtonChecked
DrawEdge
wsprintfW
CheckRadioButton
SetPropW
LoadCursorW
EnableWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DestroyMenu
IsWindowEnabled
GetSystemMetrics
GetFocus
DrawFocusRect
LoadStringW
MoveWindow
CopyRect
MessageBoxW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW

gdi32

CreateSolidBrush
LineTo
MoveToEx
ExtTextOutW
DeleteObject
SetTextColor
SetBkColor
GetStockObject
GetTextExtentPoint32W
SetTextAlign
SelectObject
TextOutW

ole32

StringFromGUID2

msvcr71

_except_handler3
_vsnwprintf
memcpy
strstr
wcsstr
wcstok
_wtoi
towlower
free
_onexit
malloc
realloc
_initterm
_XcptFilter
_adjust_fdiv
__CppXcptFilter
__dllonexit
memset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

628f9c862417a5f78e02ee17cf48bbb4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 35KB - Virtual size: 68KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 35KB - Virtual size: 68KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB