3475f5a91031658eabadea6c296b10f3c6c5693f88beb25b949ec0df8ad6d992

Sharing

Copy URL Twitter E-mail

General

Target

3475f5a91031658eabadea6c296b10f3c6c5693f88beb25b949ec0df8ad6d992
Size

96KB
MD5

fa2de0fc9b8795c9ccb26da285cb8220
SHA1

f7dbd4e97f11cc53924ba917ca354aab7581bff8
SHA256

3475f5a91031658eabadea6c296b10f3c6c5693f88beb25b949ec0df8ad6d992
SHA512

be6f09f50d129abbd45197419fa6eca1ee2024212ee54789b3c29e542392cdd5ee4a28fe24740bb7c992073c80908bdec5475d7417987481260c1ce23239f900
SSDEEP

1536:/4RS3pb9j7vJ7qxhB661GDIJWDTW4Lbloxn1v9n9PODK:ARypbl7vJ72B661Ii1v9n9POD

Score

N/A

Malware Config

Signatures

Files

3475f5a91031658eabadea6c296b10f3c6c5693f88beb25b949ec0df8ad6d992
.dll windows x86

43a7d18a02442edc094b5ee7edbba49a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
DeleteCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapAlloc
GetTickCount
OpenFileMappingW
SetLastError
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
InitializeCriticalSection
DisableThreadLibraryCalls
VirtualProtect
MapViewOfFile
GetVersion
GetStartupInfoA
LocalAlloc
LocalFree
FormatMessageA
lstrcmpiA
lstrcpynA
lstrlenA
lstrcpyA
GetModuleHandleA
GetLocaleInfoA
RtlUnwind
GetModuleFileNameA
GetACP
VirtualFree
VirtualAlloc
GetLastError
GlobalAlloc
CloseHandle
GetCommandLineA

user32

SetForegroundWindow
GetLastActivePopup
SetWindowTextA
SetDlgItemInt
GetDlgItemInt
DestroyIcon
IsWindowVisible
DestroyMenu
TrackPopupMenu
SetMenuDefaultItem
GetSubMenu
LoadMenuA
GetCursorPos
LoadStringA
MessageBoxA
WinHelpA
wsprintfA
FindWindowA
CreateWindowExA
ShowWindow
SetDlgItemTextA
UpdateWindow
SetTimer
KillTimer
GetWindowRect
SetFocus
GetDlgItem
EnableWindow
ScreenToClient
SetWindowPos
GetParent
LoadIconA
SendMessageA
TranslateMessage
DispatchMessageA
GetMessageA
GetWindowLongA
PostMessageA
DestroyWindow
SetWindowLongA
EndDialog
DialogBoxParamA
DefWindowProcA

advapi32

RegCloseKey
RegCreateKeyA

rpcrt4

RpcBindingFree
RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingW
NdrClientCall2

msvcr71

_onexit
_XcptFilter
free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler3
malloc
__CppXcptFilter
__dllonexit

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43a7d18a02442edc094b5ee7edbba49a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

msvcr71

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 36KB - Virtual size: 69KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 36KB - Virtual size: 69KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 2KB - Virtual size: 1KB