bda7ea0143090981e5a99e8893a985ca5ef470992ca28e154fd63d91a5ee0f1e

General

Target

bda7ea0143090981e5a99e8893a985ca5ef470992ca28e154fd63d91a5ee0f1e
Size

89KB
MD5

3fef7269f2e1e9091ed0da8cce18907a
SHA1

6aa3aa77211be4ae455bd29873899397141363f9
SHA256

bda7ea0143090981e5a99e8893a985ca5ef470992ca28e154fd63d91a5ee0f1e
SHA512

374aaef890cb1884eb30a033d5f0361f98e857a74ebf2ca5337c17ee979a8358debe48a055285bdbff9f867e74035247d60cc3926d9edacf435e19adf7f4262c
SSDEEP

1536:8kiGGVXltU49VUDfOwoMNqgY0AEgZC20TVqcLNuXWgF9p2Y8dL:JKz9qDfOwPNqgFAEgDqqcLYGQ2Yy

Score

N/A

Malware Config

Signatures

Files

bda7ea0143090981e5a99e8893a985ca5ef470992ca28e154fd63d91a5ee0f1e
.dll windows x86

fb11e53bcbc17cf9e19ff18a47a57460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetVersionExA
DeleteFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
ExitThread
TerminateThread
WaitForMultipleObjects
CreateMailslotA
GetModuleFileNameA
GetLastError
OpenProcess
lstrcpyA
lstrcatA
SetEvent
WaitForSingleObject
IsBadReadPtr
ReadFile
lstrlenA
CreateDirectoryA
GetTickCount
SetFilePointer
GetTempFileNameA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
LoadLibraryA
ReleaseMutex
GetModuleHandleW
CreateEventA
CreateMutexW
MultiByteToWideChar
CreateThread
FindNextFileA
FindFirstFileA
lstrcmpA
ResetEvent
CompareStringA
GetWindowsDirectoryA
GetSystemDirectoryA
CreateFileA
FindClose
WriteFile
CloseHandle
SetEndOfFile
GetProcAddress

user32

wsprintfA
FindWindowA
GetDesktopWindow

advapi32

CryptDestroyKey
CryptReleaseContext
RegNotifyChangeKeyValue
RegCreateKeyExA
RegSetValueExA
CreateProcessAsUserA
InitializeSecurityDescriptor
CryptEncrypt
CryptDeriveKey
ImpersonateLoggedOnUser
RegOpenCurrentUser
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RevertToSelf
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
CryptDestroyHash

iphlpapi

GetAdaptersInfo

shell32

SHGetFolderPathA

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb11e53bcbc17cf9e19ff18a47a57460

Headers

File Characteristics

Imports

kernel32

user32

advapi32

iphlpapi

shell32

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB