398806ae5cf05c49d5c6d6428b84aa199ce74132f34ca56720bbab8a6b524f1e

General

Target

398806ae5cf05c49d5c6d6428b84aa199ce74132f34ca56720bbab8a6b524f1e
Size

127KB
MD5

201b11c6ca4a4c0992a69c64f04ec041
SHA1

40cf7f927841c364f910e774cf9e08d5b0bb10b6
SHA256

398806ae5cf05c49d5c6d6428b84aa199ce74132f34ca56720bbab8a6b524f1e
SHA512

6c2a4d9710e23cb1639a81e39b9b51759f60c7a37c69c316a29f76e45a7716c0dcdb169976ecb5d60ce68158e4c88c882f86291c54ce8d700c76924f2d79c3f4
SSDEEP

3072:TGtE1FAjjZLYliNZBuBF7N9PJHkV0KMMiU1m9:Tv1SZLYlcZQBlb1kV0KNP

Score

N/A

Malware Config

Signatures

Files

398806ae5cf05c49d5c6d6428b84aa199ce74132f34ca56720bbab8a6b524f1e
.dll windows x86

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus

ole32

WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject

user32

SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups

shell32

SHGetFileInfoA
SHBindToParent
SHFileOperationA

shlwapi

PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA

msvcrt

time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf

kernel32

TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile

Exports

Exports

Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl

Sections

.text
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 28KB

.rdata Size: 33KB - Virtual size: 36KB

.data Size: 34KB - Virtual size: 36KB

.idata Size: 10KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 24KB - Virtual size: 28KB

.rdata
Size: 33KB - Virtual size: 36KB

.data
Size: 34KB - Virtual size: 36KB

.idata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 28KB