4e00bbf6f4ec3114e844d8910a445dc8e66ee00ff3c23deef9e3f19f30508cf7

Sharing

Copy URL Twitter E-mail

General

Target

4e00bbf6f4ec3114e844d8910a445dc8e66ee00ff3c23deef9e3f19f30508cf7
Size

588KB
MD5

d860b2c52be90ac4d6f5b8924323ad70
SHA1

2496b03a9f3e2398ea5d5a988962a5a051bb97bd
SHA256

4e00bbf6f4ec3114e844d8910a445dc8e66ee00ff3c23deef9e3f19f30508cf7
SHA512

144d75f316f53f472c745db9effde2b90cb6ac4da29249544ef71460813d7921f7a913d444ebadeaf79b55c71f8da8606f6141b7a1f78198120747862adee4f9
SSDEEP

12288:jXMnmTiMorf4hHNEiJiZetvWvFNWQHv5cYOT:zKmTGQegoedWv6fT

Score

N/A

Malware Config

Signatures

Files

4e00bbf6f4ec3114e844d8910a445dc8e66ee00ff3c23deef9e3f19f30508cf7
.dll windows x86

ff7f5b48f786f048652420dcd8fe28dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetDateFormatA
CloseHandle
GetModuleHandleA
WideCharToMultiByte
UnhandledExceptionFilter
InterlockedIncrement
GetCurrentThreadId
CreateFileW
DeleteCriticalSection
GetModuleFileNameW
Sleep
InterlockedDecrement
VirtualAlloc
TerminateProcess
WaitForSingleObject
LoadResource
FreeLibrary
GetCurrentProcessId
EnterCriticalSection
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
GetLastError
InterlockedExchange
LocalAlloc
SetUnhandledExceptionFilter
GlobalAlloc
MultiByteToWideChar
InterlockedCompareExchange
lstrcmpiW
SetEvent
QueryPerformanceCounter
DeviceIoControl
RaiseException
lstrlenW
ReadFile
GetTickCount
GetSystemTimeAsFileTime
GetModuleHandleW

shell32

ShellExecuteW

ole32

CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemRealloc

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

oleaut32

LoadTypeLi
RegisterTypeLi
SysFreeString
SysStringLen
SysAllocString
VarUI4FromStr
UnRegisterTypeLi

Exports

Exports

ProgramText
Realloc
TabError
_Type
destroy_read_struct
vGetFileA
warning

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff7f5b48f786f048652420dcd8fe28dc

Headers

File Characteristics

Imports

kernel32

shell32

ole32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 184KB - Virtual size: 184KB

.rsrc Size: 156KB - Virtual size: 153KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 184KB - Virtual size: 184KB

.rsrc
Size: 156KB - Virtual size: 153KB

.reloc
Size: 8KB - Virtual size: 7KB