44f5b41f430091a0d1ad68f40d7fddacf293b22ed07e860af784018c4d4da020

General

Target

44f5b41f430091a0d1ad68f40d7fddacf293b22ed07e860af784018c4d4da020
Size

88KB
MD5

9813b9175f01db0cf157319db12dac6c
SHA1

9a5557e17f231395c91cb77af5350022e419f132
SHA256

44f5b41f430091a0d1ad68f40d7fddacf293b22ed07e860af784018c4d4da020
SHA512

3ad7df0d11eff9149df237683a0d0ea7e717491f360c8b974e421c5d1d56cd5dd3d53fb7f3c7413e95f9c713a363b256ea7328b8dc18b10c4d9a50e33d87f2d6
SSDEEP

1536:BIt6QTmxBmQ4h/QVlSXo33xirLJCwCkciUhJ15MpnP:BItMYLJgSCUU715MV

Score

N/A

Malware Config

Signatures

Files

44f5b41f430091a0d1ad68f40d7fddacf293b22ed07e860af784018c4d4da020
.dll windows x86

63993904b8d59c5771efb6ce7f541801

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

DeleteFileA
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapAlloc
RaiseException
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
CloseHandle
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetEndOfFile
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

Exports

Exports

DecodeFile
DecodeMemory
GetDecodeFileSize
GetFileNumber
GetRealFilename
Initialize
Release

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63993904b8d59c5771efb6ce7f541801

Headers

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 6KB - Virtual size: 6KB