f06d39858de93d522e619dfe65c0f634121fa6a4a6e841fafb8bb7ff1a5b755c

Sharing

Copy URL Twitter E-mail

General

Target

f06d39858de93d522e619dfe65c0f634121fa6a4a6e841fafb8bb7ff1a5b755c
Size

86KB
MD5

a1a8af87037601562a455fc572b82f20
SHA1

0fb7446f17c32444b7fa909ddbf53742fa05d0ad
SHA256

f06d39858de93d522e619dfe65c0f634121fa6a4a6e841fafb8bb7ff1a5b755c
SHA512

fa01807878035c966aea54fe4b1fa5d17f6cb03ff460f65e2f7709ddc3a2143e8988cac97a778b3d586f3d2c89e295403d55b4ae585e301d0a4acf56b27d3e4d
SSDEEP

1536:Xi0O24pCAogIn63GkAtGWFA+4IjZU6RZlyfA+AHXkOe6hyUuAyLVa6dn:V4p/ogqZkAgWFkIiqloNwuI2VJd

Score

N/A

Malware Config

Signatures

Files

f06d39858de93d522e619dfe65c0f634121fa6a4a6e841fafb8bb7ff1a5b755c
.dll windows x86

da819f7433f1415471735cb2a3405b19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
CreateEventA
CreateThread
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
QueueUserAPC
SetEvent
WaitForSingleObject
CloseHandle
GetComputerNameA
Sleep
SleepEx
GetTickCount
GlobalAlloc
LocalAlloc
LocalFree
GlobalFree
WideCharToMultiByte
LoadLibraryExA
SetUnhandledExceptionFilter
FindResourceA
LoadResource
SizeofResource
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
lstrcatA
lstrcpyA
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
GetNumberFormatA
CompareFileTime
SystemTimeToFileTime
GetSystemTime
MultiByteToWideChar
HeapFree
TerminateThread
GetProcessTimes
HeapCreate
ExitThread
WaitForMultipleObjectsEx
SuspendThread
ResumeThread
GetShortPathNameA
GetLastError
HeapAlloc

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc

user32

PeekMessageA
CreateWindowExA
RegisterClassA
UnregisterClassA
PostMessageA
DefWindowProcA
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CharNextA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
GetUserNameA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteKeyA

Exports

Exports

GoActiivateHandleeState
GoEEnddTokenLengtth

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da819f7433f1415471735cb2a3405b19

Headers

File Characteristics

Imports

kernel32

ole32

user32

advapi32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 37KB - Virtual size: 65KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 37KB - Virtual size: 65KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB