12db0a3ceafa34e3b39c12da2e6eeefb54cef48537e6717a101374be86c76d11

General

Target

12db0a3ceafa34e3b39c12da2e6eeefb54cef48537e6717a101374be86c76d11
Size

435KB
MD5

50cc4e9486e497d33fcd1f0f9aa5c520
SHA1

7b92009585365b847cedb38f6def432a78836c77
SHA256

12db0a3ceafa34e3b39c12da2e6eeefb54cef48537e6717a101374be86c76d11
SHA512

17c613faa4a01fce6de20a03b832c4b96e1d194d3de80700ef27a3b45ef4d7f22edf11657c7c72319082c4c8494a0273183315c3b623b85f55d26552d566345a
SSDEEP

6144:Z+SdJ5j81dZWggICocxJA43Mnq4k1R5GyiNbucCFHV9jni79h1JWZ2KS:ZxJib/ghfxJA48nq4OfiwZnipTJwS

Score

N/A

Malware Config

Signatures

Files

12db0a3ceafa34e3b39c12da2e6eeefb54cef48537e6717a101374be86c76d11
.dll windows x86

eb3558bd917527e118ae514d68ff1b8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

ImagehlpApiVersionEx

user32

UnhookWindowsHookEx
SetWindowsHookExA
RegisterWindowMessageA
PostMessageA
GetWindowLongA

kernel32

GetTickCount
lstrcpyA
WriteFile
WideCharToMultiByte
VirtualFree
VirtualAlloc
TerminateProcess
SetLastError
DisableThreadLibraryCalls
EnterCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetVersion
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
RtlUnwind
SetHandleCount

Exports

Exports

ASTFromString
EvalFrameEx
ExecCodeModuleEx
GetIter
OSError
SetBufSize
SimpleStringFlags
_Size
permit_empty_plte

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb3558bd917527e118ae514d68ff1b8e

Headers

File Characteristics

Imports

dbghelp

user32

kernel32

Exports

Exports

Sections

.text Size: 178KB - Virtual size: 178KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 86KB - Virtual size: 87KB

.rsrc Size: 60KB - Virtual size: 60KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 178KB - Virtual size: 178KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 86KB - Virtual size: 87KB

.rsrc
Size: 60KB - Virtual size: 60KB

.reloc
Size: 10KB - Virtual size: 9KB