6fb11a8cfe6b62592da4366325258e593b819f25beb9f132dc996f0ecafd095a

Sharing

Copy URL Twitter E-mail

General

Target

6fb11a8cfe6b62592da4366325258e593b819f25beb9f132dc996f0ecafd095a
Size

393KB
MD5

990db0a227965c9db074edc6de89c443
SHA1

11907b036d28f45542e5d20fa7867008d92ffd98
SHA256

6fb11a8cfe6b62592da4366325258e593b819f25beb9f132dc996f0ecafd095a
SHA512

d72d7a4971aa2f57f03e140d26fad655c2d457e53f52a758b644fb1a91214198a93c8ee372feeefe78cb199ad7858126dbf24405e79e108e6062e4cef1e78cd2
SSDEEP

12288:2Y6NQDbbf3hE6iyDsYgO/mqMouPUsrUlLG:IebbJElyD1mqMovgW

Score

N/A

Malware Config

Signatures

Files

6fb11a8cfe6b62592da4366325258e593b819f25beb9f132dc996f0ecafd095a
.dll windows x86

01bee9fa49c61ea0952f17952424a22d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_unlock
_CIasin
tolower
raise
qsort
memset
memmove
memcpy
mbstowcs
malloc
iswspace
iswpunct
iswdigit
iswalpha
free
floor
_wspawnvp
_vsnwprintf
_vsnprintf
_CIacos
_stricmp
_purecall
_onexit
_mbsnccnt
_lock
_isnan
_finite
_controlfp
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIsqrt
_CIsin
_CIcos
_CIatan2
_CIatan

ole32

CreateStreamOnHGlobal

gdi32

TranslateCharsetInfo
SetTextColor
SetTextAlign
SetBkMode
SetBkColor
MoveToEx
GetTextMetricsW
GetTextMetricsA
GetObjectW
GetObjectA
GetGlyphOutlineA
GetFontLanguageInfo
GetCharacterPlacementW
GetCharacterPlacementA
ExtTextOutW
ExtTextOutA
DeleteObject
CreateFontIndirectA
CreateDIBSection
SetMapMode

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
LsaEnumerateAccounts

kernel32

GetProcessAffinityMask
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFullPathNameW
GetFileSizeEx
GetProcessPriorityBoost
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
FindResourceW
FindResourceA
ExitProcess
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LockResource
MultiByteToWideChar
OutputDebugStringA
Process32Next
QueryPerformanceCounter
ReadFile
ReleaseMutex
SetFilePointer
SetTapeParameters
SizeofResource
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
GetFileSize
CreateFileA
CreateMutexA
DebugBreak
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection

Exports

Exports

Float32To16Array
IsExtensionPresent
MatrixAffineTransformation2D
QuerySingleInstanceW
TransformFile

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01bee9fa49c61ea0952f17952424a22d

Headers

File Characteristics

Imports

msvcrt

ole32

gdi32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 203KB - Virtual size: 203KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 47KB - Virtual size: 46KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 203KB - Virtual size: 203KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 47KB - Virtual size: 46KB

.reloc
Size: 3KB - Virtual size: 3KB