fc6fa46c237ec0e106c24a88ad4d456bc41d92189d526eb86fe43b7c472a6098

General

Target

fc6fa46c237ec0e106c24a88ad4d456bc41d92189d526eb86fe43b7c472a6098
Size

52KB
MD5

4a586604d5abdbf66c0ddfcda0991d99
SHA1

6eaae1499afeef9eb6ba9fda7972a461e5aebc99
SHA256

fc6fa46c237ec0e106c24a88ad4d456bc41d92189d526eb86fe43b7c472a6098
SHA512

8e2178542bf9883d114d1dd08dca31f37eafbb6f3771f7574e1aa27b75210810de04895f7cbe812c514600f0998300475039c5138e7f773e78098954652acd77
SSDEEP

1536:WflQIEWO79qS8Px+HSEa9FIZjfojIhyugmtC:Wt39ePDbA20cntC

Score

N/A

Malware Config

Signatures

Files

fc6fa46c237ec0e106c24a88ad4d456bc41d92189d526eb86fe43b7c472a6098
.dll windows x86

a0afea850eea49c3131ebec0423ad4a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
StgOpenStorage
CoUninitialize

user32

GetProcessWindowStation
GetUserObjectInformationA
CloseWindowStation

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

psapi

GetModuleFileNameExA

msvcrt

_adjust_fdiv
malloc
free
_snprintf
_memicmp
memcpy
strrchr
memset
_initterm

kernel32

GetLastError
InterlockedIncrement
CreateFileMappingA
MapViewOfFile
DisableThreadLibraryCalls
OpenFileMappingA
CreateMutexA
UnmapViewOfFile
CreateThread
VirtualAlloc
LoadLibraryA
GetProcAddress
OpenProcess
TerminateProcess
CloseHandle
IsBadReadPtr
lstrcpyA
GetFileAttributesA
MultiByteToWideChar
LocalAlloc
VirtualFree
LocalFree

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllPreTranslateMessage

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0afea850eea49c3131ebec0423ad4a5

Headers

File Characteristics

Imports

ole32

user32

advapi32

psapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 42KB - Virtual size: 41KB

.reloc Size: 512B - Virtual size: 482B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 42KB - Virtual size: 41KB

.reloc
Size: 512B - Virtual size: 482B