4e8762b4e477bcc85bd3b57e693ffcab10fd04aefd1730dcb0fe66e2be0d1057

Sharing

Copy URL

Twitter E-mail

General

Target

4e8762b4e477bcc85bd3b57e693ffcab10fd04aefd1730dcb0fe66e2be0d1057
Size

89KB
MD5

bf4f555c27a4d37532d0e0ddfa142d60
SHA1

0c292bc43dff4c5bcd46f29edce243d438800feb
SHA256

4e8762b4e477bcc85bd3b57e693ffcab10fd04aefd1730dcb0fe66e2be0d1057
SHA512

cd9c1b0437d2589266f544e8ac0f3530f69aa91afc56df5c6b29fc1d6a4a9d84ea978f8c80bc01accaebb19a3da30317b27defbf4876230798f928098c4fbd9c
SSDEEP

1536:3TuCgIvkTiyn92SnI58HOi3j4BlLqkYdeDrL6J+KxcePyadYG4HY/KVhe:36rIMtAS28HniLq1eDX6J+Kc+yadYJb

Score

N/A

Malware Config

Signatures

Files

4e8762b4e477bcc85bd3b57e693ffcab10fd04aefd1730dcb0fe66e2be0d1057
.dll windows x86

30142dc4c7a61267ffb1573f7ae102c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeEncryptionCertificateHashList

gdi32

SetStretchBltMode
GdiStartDocEMF

kernel32

GetCommandLineA
DuplicateHandle
SetConsoleCP
LoadResource
FindResourceA
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetVersionExA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetEnvironmentVariableA

oleaut32

VarPow
VarDecAdd

rpcrt4

NdrComplexStructMarshall

user32

FindWindowExA
GrayStringW
TrackPopupMenu
DialogBoxParamA

Exports

Exports

Mmtqfz

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30142dc4c7a61267ffb1573f7ae102c9

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

oleaut32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 28KB - Virtual size: 28KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 28KB - Virtual size: 28KB

.reloc
Size: 3KB - Virtual size: 3KB