1bf80956ee6248551884042ad0f06f2ac4b15e802cb0540f79012acb90ed3773

Sharing

Copy URL Twitter E-mail

General

Target

1bf80956ee6248551884042ad0f06f2ac4b15e802cb0540f79012acb90ed3773
Size

576KB
MD5

09eec2db127c2ad5493cf9fe2c5dbee0
SHA1

e8be436180164812baca531ddcfaee0dfacbe4ce
SHA256

1bf80956ee6248551884042ad0f06f2ac4b15e802cb0540f79012acb90ed3773
SHA512

657aab0f4f6fc5779940e9ed51cdb48453763e4aae984bfd7ccab24d214190ae9ca9d93d520b54c7f3c1d438b0093a5da3a29a5b9591e2772f120dd38c0a18b0
SSDEEP

12288:1fEVczFF+jte2rQkXb+90zR5gsdPe1a888+gZFtrVL8:1YUejM24mzP5Ves6r98

Score

N/A

Malware Config

Signatures

Files

1bf80956ee6248551884042ad0f06f2ac4b15e802cb0540f79012acb90ed3773
.dll windows x86

9097c39bac8dc80a7a082c4071720506

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
VarUI4FromStr
RegisterTypeLi
LoadTypeLi

kernel32

GetCurrentThreadId
InterlockedExchange
LoadResource
Sleep
SetUnhandledExceptionFilter
GlobalAlloc
TerminateProcess
GetLastError
SetEvent
WaitForSingleObject
EnterCriticalSection
CreateFileW
LeaveCriticalSection
GetModuleFileNameW
InterlockedCompareExchange
ReadFile
QueryPerformanceCounter
GetModuleHandleA
InterlockedDecrement
RaiseException
DeviceIoControl
DeleteCriticalSection
GetModuleHandleW
lstrcmpiW
LocalAlloc
InitializeCriticalSection
GetSystemTimeAsFileTime
GetDateFormatA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
InterlockedIncrement
GetTickCount
UnhandledExceptionFilter
GetVersionExA
LocalFree
VirtualAlloc
CloseHandle
GetCurrentProcessId
FreeLibrary

ole32

CoInitialize
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemAlloc

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW

shell32

ShellExecuteW

Exports

Exports

CallObject
FromNode
IsSubclass
PendingDeprecationWarning
SetAttr
StreamWriter
_Fini
get_x_pixels_per_meter
set_packing

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9097c39bac8dc80a7a082c4071720506

Headers

File Characteristics

Imports

oleaut32

kernel32

ole32

advapi32

shell32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 192KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 140KB - Virtual size: 140KB

.rsrc Size: 156KB - Virtual size: 153KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 196KB - Virtual size: 192KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 140KB - Virtual size: 140KB

.rsrc
Size: 156KB - Virtual size: 153KB

.reloc
Size: 8KB - Virtual size: 7KB