b31eec42842c9ec2036a7504c6c4f22a2e7ee0a5e4d831e3a137497de2e26ce2

Sharing

Copy URL Twitter E-mail

General

Target

b31eec42842c9ec2036a7504c6c4f22a2e7ee0a5e4d831e3a137497de2e26ce2
Size

116KB
MD5

4a19533f3b7b86079d6a230f3e1070e1
SHA1

ef9b851e1d2d35557e7a4a1ede4d8dd1835294f9
SHA256

b31eec42842c9ec2036a7504c6c4f22a2e7ee0a5e4d831e3a137497de2e26ce2
SHA512

c49887a453fff0e690c4efb137c8a91c53a6016e937bc887ab241d6337157304fdb865d520da9e51867d92e179d11b10e99ac471e13e8abac7191460a4ff0747
SSDEEP

1536:tzku3P2UGUlw8glUb1vDSSvHl0dRfGbk8Xij1aP4KIt1OW0aWnXCoYCk2aODmrw:2u3Z45UQSvFwftn5aP4MyWnACZaODmU

Score

N/A

Malware Config

Signatures

Files

b31eec42842c9ec2036a7504c6c4f22a2e7ee0a5e4d831e3a137497de2e26ce2
.dll windows x86

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CryptDuplicateHash
ElfOldestRecord
EnumDependentServicesW
FreeSid
GetLengthSid
GetOldestEventLogRecord
InitializeAcl
InitializeSecurityDescriptor
LookupAccountNameW
MakeSelfRelativeSD
NotifyChangeEventLog
ObjectDeleteAuditAlarmW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetEntriesInAclW
SetFileSecurityW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner

gdi32

OffsetWindowOrgEx

kernel32

GetCommandLineA
CreateDirectoryW
DeleteFileW
EnterCriticalSection
FillConsoleOutputCharacterA
FreeLibrary
GetComputerNameW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetLocalTime
GetProcAddress
GlobalAlloc
GlobalCompact
GlobalFree
HeapUnlock
LeaveCriticalSection
LoadLibraryExW
LocalAlloc
LocalFree
OutputDebugStringW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetPriorityClass
SetProcessShutdownParameters
Sleep
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
LoadResource
FindResourceA
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetCurrentThreadId
GetVersionExA
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
FatalAppExitA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize

ole32

CoUninitialize
CoInitializeEx
CoInitialize
CoGetClassObject
OleLoadFromStream

oleaut32

VarI4FromR8
VarI1FromR8

rpcrt4

I_RpcFreeBuffer
NdrSimpleTypeUnmarshall
RpcServerUnregisterIf

user32

GetLastInputInfo
DdeKeepStringHandle
DdeAbandonTransaction
GetMenuItemCount
LoadStringW
MessageBoxIndirectA
MessageBoxW
SetCursor
SetScrollPos

Exports

Exports

Irxni

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 4KB