34998aa5682e0e2603646e59b2a15bf653a084d6703fd2280083a5b209609d06

General

Target

34998aa5682e0e2603646e59b2a15bf653a084d6703fd2280083a5b209609d06
Size

676KB
MD5

86ec0155e333c52cddfe0350c071de60
SHA1

0bdb9c21f549e59c6b07f27a324e88dbbcfe9917
SHA256

34998aa5682e0e2603646e59b2a15bf653a084d6703fd2280083a5b209609d06
SHA512

eb3d8da397699c6bc2c693dde343915e79ba84bddd6a27a816813b3e0aac5171fb4d85319fbb6cb905218d21fda8f3f26e19dace0772c94631f6d5999d152aa7
SSDEEP

12288:xev3Z3lNXqW6hM2iKEDx01HfsvBb+XCsnJ:xS3loRMR5t01Ep+y

Score

N/A

Malware Config

Signatures

Files

34998aa5682e0e2603646e59b2a15bf653a084d6703fd2280083a5b209609d06
.dll windows x86

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
QueryPerformanceCounter
GetLocaleInfoA
GetModuleFileNameA
SetEvent
InterlockedExchange
GetEnvironmentStrings
WideCharToMultiByte
InitializeCriticalSection
GetFileType
IsBadReadPtr
GetACP
DisconnectNamedPipe
DeleteCriticalSection
RtlUnwind
ConnectNamedPipe
GetStartupInfoA
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
HeapFree
IsBadCodePtr
GetStdHandle
SetLastError
CreateTimerQueueTimer
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
ResetEvent
CreateEventA
GetOEMCP
lstrcpyW
SetUnhandledExceptionFilter
CreateMutexW
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadWritePtr
GetSystemInfo
LoadLibraryA
DeleteTimerQueueTimer
GetCurrentProcessId
WaitForSingleObject
CreateThread
UnmapViewOfFile
WriteFile
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
LCMapStringW
CreateNamedPipeA
InterlockedCompareExchange
DuplicateHandle
WaitForMultipleObjects
FreeEnvironmentStringsA
LeaveCriticalSection
GetLastError
ReleaseMutex
GetModuleHandleA
OpenProcess
GetVersionExA
Sleep
GetTickCount
lstrcatW
MultiByteToWideChar
CopyFileA
EnterCriticalSection
VirtualQuery
InterlockedExchangeAdd

user32

DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

ygmagww

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 595KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.data Size: 595KB - Virtual size: 624KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 77KB - Virtual size: 76KB

.data
Size: 595KB - Virtual size: 624KB

.reloc
Size: 3KB - Virtual size: 2KB