924f12e17271652fa9f344160f5764f2555a071e2ed059ea90fbb341aaef6867

Sharing

Copy URL Twitter E-mail

General

Target

924f12e17271652fa9f344160f5764f2555a071e2ed059ea90fbb341aaef6867
Size

892KB
MD5

4b9749fb4b2552854d2939362233845c
SHA1

aa429e4cd4a1f674624b32ef5451b78d69230451
SHA256

924f12e17271652fa9f344160f5764f2555a071e2ed059ea90fbb341aaef6867
SHA512

a22c8eafe60bc55e56dc33fc3a4cf90bb99bdbb90d8f0c88f97ce51442951008c949915e2322587f8295904b727db726f4964342aa5c39f7dc9db5030ccf4bd8
SSDEEP

12288:UnnDCk9+sHNGvkjo2cvGN1YM7X/5dbXKtNfGCEmG:inDCk5HNGszv7xdXKnfrE

Score

N/A

Malware Config

Signatures

Files

924f12e17271652fa9f344160f5764f2555a071e2ed059ea90fbb341aaef6867
.dll windows x86

e0a15176c386d7eed9a516f908acab06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue

kernel32

LoadLibraryA
CreateEventA
InitializeCriticalSection
GetProcAddress
CloseHandle
DeleteCriticalSection
FreeLibrary
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetLastError
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ReadFile
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
CreateFileA
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile

Exports

Exports

_LakeClose@0
_LakeDH@28
_LakeFindFilter@12
_LakeFlush@0
_LakeGetFilterInfo@4
_LakeGetMode@0
_LakeLoadFilter@16
_LakeOpen@0
_LakeProcess@20
_LakeSetMode@4

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0a15176c386d7eed9a516f908acab06

Headers

File Characteristics

Imports

advapi32

kernel32

Exports

Exports

Sections

.text Size: 280KB - Virtual size: 280KB

CODE Size: 12KB - Virtual size: 8KB

.rdata Size: 544KB - Virtual size: 541KB

.data Size: 20KB - Virtual size: 385KB

.data1 Size: 8KB - Virtual size: 4KB

DATA Size: 4KB - Virtual size: 52B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 280KB - Virtual size: 280KB

CODE
Size: 12KB - Virtual size: 8KB

.rdata
Size: 544KB - Virtual size: 541KB

.data
Size: 20KB - Virtual size: 385KB

.data1
Size: 8KB - Virtual size: 4KB

DATA
Size: 4KB - Virtual size: 52B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 15KB