771163acc2d6dee2ddc1835b5fb2557e7b34e980c260140a4801bf22f384baf5

General

Target

771163acc2d6dee2ddc1835b5fb2557e7b34e980c260140a4801bf22f384baf5
Size

108KB
MD5

3a89e25c71a960333a41966429481593
SHA1

7a0c724dc5878a48ed4066545de6ca8afe88110e
SHA256

771163acc2d6dee2ddc1835b5fb2557e7b34e980c260140a4801bf22f384baf5
SHA512

570c74709debaa033a155d7d4dad5a79fa1e604b28c95b49188d84d33d32b88a0eb0423bf27022bfe8e5438c72e08e2b96c56d879b9fb5e9a7c244c16a7e3157
SSDEEP

3072:F9rSawxem89aXsUVmid9swo4IqGh622gmQn:LXwxem89a7QmswobqGh625mQ

Score

N/A

Malware Config

Signatures

Files

771163acc2d6dee2ddc1835b5fb2557e7b34e980c260140a4801bf22f384baf5
.dll windows x86

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
QueryPerformanceCounter
GetLocaleInfoA
GetModuleFileNameA
SetEvent
InterlockedExchange
GetEnvironmentStrings
WideCharToMultiByte
InitializeCriticalSection
GetFileType
IsBadReadPtr
GetACP
DisconnectNamedPipe
DeleteCriticalSection
RtlUnwind
ConnectNamedPipe
GetStartupInfoA
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
HeapFree
IsBadCodePtr
GetStdHandle
SetLastError
CreateTimerQueueTimer
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
ResetEvent
CreateEventA
GetOEMCP
lstrcpyW
SetUnhandledExceptionFilter
CreateMutexW
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadWritePtr
GetSystemInfo
LoadLibraryA
DeleteTimerQueueTimer
GetCurrentProcessId
WaitForSingleObject
CreateThread
UnmapViewOfFile
WriteFile
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
LCMapStringW
CreateNamedPipeA
InterlockedCompareExchange
DuplicateHandle
WaitForMultipleObjects
FreeEnvironmentStringsA
LeaveCriticalSection
GetLastError
ReleaseMutex
GetModuleHandleA
OpenProcess
GetVersionExA
Sleep
GetTickCount
lstrcatW
MultiByteToWideChar
CopyFileA
EnterCriticalSection
VirtualQuery
InterlockedExchangeAdd

user32

DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

rcldqo

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 77KB

.data Size: 16KB - Virtual size: 46KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 77KB - Virtual size: 77KB

.data
Size: 16KB - Virtual size: 46KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 1024B - Virtual size: 692B