2e2c36ee32dff8fc3047f3f9d18810d9f5095c117ea522acd616d6818ab559a9

Sharing

Copy URL Twitter E-mail

General

Target

2e2c36ee32dff8fc3047f3f9d18810d9f5095c117ea522acd616d6818ab559a9
Size

382KB
MD5

47d3da442091fabcd0fe4f3be20602c2
SHA1

227d7d002c7c543b3bd580a21c8c07f11a9e76b6
SHA256

2e2c36ee32dff8fc3047f3f9d18810d9f5095c117ea522acd616d6818ab559a9
SHA512

87f96cf37818c21eb38ad8cd35961e0cb5e1fea201fa61f22d30f9ae56ffc0c9951b593fa08849c581f40e116f05310fb1dc482ed58642343272de957d525843
SSDEEP

6144:M5b3K969r8Zc2RNIZ50cHT5KE7MCVzC4WRU801/ZVB8aq74yuRg9:qbNr8maAF0z54qO3Saq8y0

Score

N/A

Malware Config

Signatures

Files

2e2c36ee32dff8fc3047f3f9d18810d9f5095c117ea522acd616d6818ab559a9
.dll windows x86

ed7f2ad3434137e66262869cc9c72ff1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfW
TranslateMessage
SetWindowTextA
PeekMessageA
GetWindowThreadProcessId
GetClassNameA
EnumWindows
EnumChildWindows
DispatchMessageA

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyExW

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

VirtualAlloc
UnmapViewOfFile
VirtualAllocEx
TerminateProcess
SystemTimeToFileTime
SetUnhandledExceptionFilter
VirtualFreeEx
WideCharToMultiByte
UnhandledExceptionFilter
lstrlenW
SetLastError
lstrlenA
lstrcmpA
CloseHandle
CompareFileTime
CreateDirectoryA
CreateFileA
CreateFileMappingA
DebugBreak
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
FreeLibrary
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GetVersionExA
GetVersionExW
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
IsBadStringPtrA
IsValidCodePage
LoadLibraryA
LoadResource
LocalFree
LockFileEx
LockResource
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
SearchPathA
SetFilePointer
WriteFile

ole32

CoInitialize
CoCreateInstance
CoUninitialize

msvcrt

__pioinfo
_amsg_exit
_atoi64
_fileno
_initterm
_iob
_isatty
_ismbbkprint
_ismbblead
_itoa
_loaddll
_lock
_lseeki64
_mbstok
_onexit
_purecall
_read
_stricmp
_strlwr
_strnicmp
_strrev
_strtime
_wcsicmp
_wcsncoll
_wexecvpe
_write
atoi
calloc
clock
fclose
__p__pgmptr
fopen
fprintf
free
fwrite
gmtime
isalpha
isdigit
isleadbyte
isspace
isupper
iswprint
isxdigit
localeconv
malloc
mbtowc
memcpy
memset
printf
rand
realloc
sprintf
strrchr
strstr
strtoul
swprintf
time
tolower
wcschr
wcsncpy
wcsrchr
wcsstr
wctomb
__mb_cur_max
__dllonexit
__badioinfo
_XcptFilter
ferror

dbghelp

SymGetTypeInfo
SymFunctionTableAccess
SymFindFileInPath
SymEnumSymbols
SymCleanup
ImageRvaToVa
ImageNtHeader
ExtensionApiVersion

Exports

Exports

CaptureStop
CreatePRTEngine
GetBroadcastSockaddr
GetDisplayName
GetImageInfoFromFileW
NextEntry
ReadFileTransforms
SavePRTCompBufferToFileA

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed7f2ad3434137e66262869cc9c72ff1

Headers

File Characteristics

Imports

user32

advapi32

version

kernel32

ole32

msvcrt

dbghelp

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 197KB - Virtual size: 197KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 197KB - Virtual size: 197KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 3KB - Virtual size: 3KB