7d5877b3e72ded927f4f91a07ee92134e2bac553702b06cede62e6f479679e21

Sharing

Copy URL

Twitter E-mail

General

Target

7d5877b3e72ded927f4f91a07ee92134e2bac553702b06cede62e6f479679e21
Size

556KB
MD5

177bf1ecfb724dadec63ce39ac385100
SHA1

66048927c945584948593f95248add662bb80d7f
SHA256

7d5877b3e72ded927f4f91a07ee92134e2bac553702b06cede62e6f479679e21
SHA512

483a3d5d8620e6773d879faa1897f7c72b4d5e1847236fb09373b24977db780a08910f249cbfcaa5c27380c095bf1a07adc61493c0e46138e3a144c30779739d
SSDEEP

12288:2emfMXXUti2yOkV5CYH+K1shZr7KzZx/RnK:2e+LOOkVwdK1shZr74T/RnK

Score

N/A

Malware Config

Signatures

Files

7d5877b3e72ded927f4f91a07ee92134e2bac553702b06cede62e6f479679e21
.dll windows x86

3a02e261bd528f5b77ddbdcebb0c514a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx

kernel32

CreateFileW
GetThreadLocale
InterlockedExchange
GetSystemTimeAsFileTime
LocalAlloc
FreeLibrary
SetEvent
GetTickCount
DeviceIoControl
TerminateProcess
InterlockedDecrement
GetLastError
GetCurrentThreadId
DeleteCriticalSection
lstrcmpiW
InterlockedCompareExchange
GetModuleHandleW
GetModuleHandleA
CreateMutexW
lstrlenW
LoadResource
GetCurrentProcessId
ReadFile
GetModuleFileNameW
QueryPerformanceCounter
CreateEventW
UnhandledExceptionFilter
LeaveCriticalSection
Sleep
LocalFree
InitializeCriticalSection
WaitForSingleObject
InterlockedIncrement
GlobalAlloc
EnterCriticalSection
SetUnhandledExceptionFilter
GetDateFormatA
WideCharToMultiByte
MultiByteToWideChar
RaiseException
VirtualAlloc
GlobalFree
CloseHandle
GetVersionExA

shell32

ShellExecuteW

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocString
SysStringLen
VarUI4FromStr
SysFreeString
LoadTypeLi

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryInfoKeyW
ControlService
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW

Exports

Exports

Concat
GC_Track
Inittab
Iter_Next
get_copyright
mmx_support
set_shift

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a02e261bd528f5b77ddbdcebb0c514a

Headers

File Characteristics

Imports

ole32

kernel32

shell32

oleaut32

advapi32

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 178KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 140KB - Virtual size: 140KB

.rsrc Size: 152KB - Virtual size: 151KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 180KB - Virtual size: 178KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 140KB - Virtual size: 140KB

.rsrc
Size: 152KB - Virtual size: 151KB

.reloc
Size: 8KB - Virtual size: 7KB