86386e1b7f93f399f65d021d5b73402c3f1220aac5fb44c00a28f82e0b744862

General

Target

86386e1b7f93f399f65d021d5b73402c3f1220aac5fb44c00a28f82e0b744862
Size

13KB
MD5

71b5c3b5f1f6f7d8d12d138f6e0ad4f4
SHA1

9b0dbb387d894af551c6cbe8c7e25b48a1ee2fa9
SHA256

86386e1b7f93f399f65d021d5b73402c3f1220aac5fb44c00a28f82e0b744862
SHA512

5a9418de813712ef14f474a3499165b4b36fa0043b670d9a7f5e8fad7dfb10203f669e6d4127adc318e1d693909ee36ef6a9595134736728947b930d173dea32
SSDEEP

384:eUcF+83n5g1phfGaj4sUUYGGtYw+kgG4O9G:a7gXhLj4wGH4EG

Score

N/A

Malware Config

Signatures

Files

86386e1b7f93f399f65d021d5b73402c3f1220aac5fb44c00a28f82e0b744862
.dll windows x86

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileTime
GetProcAddress
LoadLibraryA
LocalAlloc
lstrcpyA
lstrcatA
Sleep
CreateThread
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetFileSize
CreateFileA
MultiByteToWideChar
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
WriteFile
GetTickCount
ReadFile
CloseHandle

user32

RegisterClassExA
LoadCursorA
UnregisterClassA
MessageBoxA
GetKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

msvcrt

strrchr
_except_handler3
strcat
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
memset
strcpy
atoi

imm32

ImmIsIME

Exports

Exports

CandWndProc
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc
pfjieaoidjglkajd

Sections

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5bcd26e9bd47970003412c4ddbd0a47

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

imm32

Exports

Exports

Sections

.bss Size: - Virtual size: 1KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 1024B - Virtual size: 1010B

.bss
Size: - Virtual size: 1KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 1024B - Virtual size: 1010B