f6c70930e7c683231f57345d497b8303fe0c0421b4d940ad19be362a1952613a

General

Target

f6c70930e7c683231f57345d497b8303fe0c0421b4d940ad19be362a1952613a
Size

156KB
MD5

5a6503ed1b6f97977d320018624884ab
SHA1

62e88cbe4c4921776135812dae103a2a2006a9d3
SHA256

f6c70930e7c683231f57345d497b8303fe0c0421b4d940ad19be362a1952613a
SHA512

71f729720a495d5d00f1ee9cbf9e341d4d26882c4d74e22b39367e15a9ad7af05801714a9de1f08ebe91cf9e50dc5abd0b061f0a98b39fdf71e675d395f04432
SSDEEP

3072:xOD4ECZd8i8/qCqK/w98qnxn/1y8n2uH6A54KuWou8AJs:xO5GRKoKqXyM2uas4KuWou

Score

N/A

Malware Config

Signatures

Files

f6c70930e7c683231f57345d497b8303fe0c0421b4d940ad19be362a1952613a
.dll windows x86

61aff399960417b253578d10eea7f280

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHCreateDirectoryExW

advapi32

RegDeleteValueA
RegQueryValueExA
LsaQuerySecret
RegCloseKey
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA

msvcrt

__p__commode
__set_app_type
_adjust_fdiv
_except_handler3
_initterm
_itoa
_mbscmp
_onexit
atoi
exit
free
labs
malloc
sprintf
strrchr
__getmainargs
__dllonexit
__CxxFrameHandler
strtok

kernel32

GetCurrentDirectoryA
FindFirstFileA
FindClose
ExitProcess
CreateDirectoryA
lstrlenA
lstrcpyA
VirtualProtect
VirtualFree
VirtualAlloc
SetCurrentDirectoryA
LocalFree
LocalAlloc
LoadLibraryA
GetVersionExA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetFileAttributesA
GetCurrentProcess
FreeLibrary

user32

TranslateMessage
SetTimer
SetParent
SetClassWord
SetCaretBlinkTime
ReleaseCapture
MsgWaitForMultipleObjects
IsWindowEnabled
GetMenuBarInfo
GetGUIThreadInfo
FlashWindowEx
DrawMenuBar
ChangeClipboardChain

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

Exports

Exports

FlushState
GetHtmlCharset
HrFillRasCombo
IndexRecordCount
Move
Update

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61aff399960417b253578d10eea7f280

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

msvcrt

kernel32

user32

setupapi

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 17KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 17KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB