d21e554c128e24ef6fe4ea822f5bcf2b4dd9c5bda6d1c7940e9f6b0853a515bb

Sharing

Copy URL Twitter E-mail

General

Target

d21e554c128e24ef6fe4ea822f5bcf2b4dd9c5bda6d1c7940e9f6b0853a515bb
Size

128KB
MD5

44190fd8b4b8d582d59ae33716221962
SHA1

3e888d2d3784b6531652e236500d8a52c36bd6d3
SHA256

d21e554c128e24ef6fe4ea822f5bcf2b4dd9c5bda6d1c7940e9f6b0853a515bb
SHA512

33a39c92a7c6d9189a9181d110dfbab655a524943ccc0e32dc903aa08056bc76ace7733ad268fb5f11a2c51ff623c755fcf9976bbd7f27c31e3de9eb3b70e872
SSDEEP

3072:ZLQILRRJUOSqwFd4a1eZgf1KBOeH2KxoQ9TCoAZfARjxos7bI:ZL3bEDeS7eWKlBIoJxo

Score

N/A

Malware Config

Signatures

Files

d21e554c128e24ef6fe4ea822f5bcf2b4dd9c5bda6d1c7940e9f6b0853a515bb
.dll windows x86

b9f5e0b0dea64970ace2f6a616539b71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateSemaphoreA
CreateThread
GetPrivateProfileIntA
WaitForSingleObject
ResetEvent
CreateEventA
Sleep
GetTempPathA
lstrcmpA
LoadLibraryA
GetFullPathNameA
GetModuleFileNameA
GetProcAddress
GetCurrentThreadId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetExitCodeProcess
InterlockedExchange
ReleaseMutex
GetTickCount
QueryPerformanceCounter
LoadLibraryExA
GetLocaleInfoA
lstrlenA
GetUserDefaultLCID
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
GetStringTypeW
VirtualAlloc
HeapAlloc
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
ReadProcessMemory
VirtualFree
TerminateProcess
DeleteFileW
lstrlenW
UnmapViewOfFile
CloseHandle
SetEvent
GetCurrentProcess
GetCommandLineA
InterlockedCompareExchange
VirtualProtect
GetStdHandle
SetHandleCount
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree

user32

SendMessageTimeoutW
IsWindow
GetWindowTextLengthW
GetWindowThreadProcessId
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetDesktopWindow
LoadStringA
LoadStringW
SetFocus
SetForegroundWindow
AttachThreadInput
IsWindowVisible
IsWindowEnabled
MsgWaitForMultipleObjects
PeekMessageA

advapi32

RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyA

ole32

CoCreateInstance

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9f5e0b0dea64970ace2f6a616539b71

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 77KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 77KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB