261469804752628e320ea89dd383d07581871dcacbeb4ace9045b1bdf51709bf

Sharing

Copy URL Twitter E-mail

General

Target

261469804752628e320ea89dd383d07581871dcacbeb4ace9045b1bdf51709bf
Size

848KB
MD5

422654d4e80cee262f57c755fb075250
SHA1

d0db9acaf474f553df59c1aa2b3e4f651b1727a7
SHA256

261469804752628e320ea89dd383d07581871dcacbeb4ace9045b1bdf51709bf
SHA512

cc3e87c7b627e622b2fd22e304e349835b939edd8174cced10d26539f73902c58f61587cf9d60aae6f0207d2aa1b96db28c9be1999c013c41638ad094cb28a1c
SSDEEP

24576:hQyKJvIlcd2hBMEONhj8wueH0ceH2I5IBcwyf7:OyKJvIud2hBXoAjeUceWbBNyf7

Score

N/A

Malware Config

Signatures

Files

261469804752628e320ea89dd383d07581871dcacbeb4ace9045b1bdf51709bf
.dll windows x86

a672c66ead0e26237b101fca82cce524

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetDateFormatA
LeaveCriticalSection
GetModuleHandleW
SetEvent
GetLastError
LocalFree
GetTickCount
InterlockedDecrement
GetModuleHandleA
WaitForSingleObject
GetSystemTimeAsFileTime
GetModuleFileNameW
ResetEvent
GetOverlappedResult
FreeLibrary
FindResourceW
MultiByteToWideChar
CancelWaitableTimer
EnterCriticalSection
GlobalFree
InitializeCriticalSection
InterlockedIncrement
GlobalAlloc
OutputDebugStringA
WaitForMultipleObjects
GetVersionExA
SetThreadLocale
GetCurrentThreadId
SetWaitableTimer
GetCurrentProcessId
WideCharToMultiByte
VirtualAlloc
LocalAlloc
LoadResource
ReleaseMutex
InterlockedCompareExchange
CloseHandle
GetThreadLocale
SizeofResource
DeleteCriticalSection
ReadFile
TerminateProcess
Sleep
lstrcmpiW
CreateFileW
RaiseException
CreateWaitableTimerW
InterlockedExchange
GetExitCodeThread
QueryPerformanceCounter
DeviceIoControl
lstrlenW
CreateThread
UnhandledExceptionFilter
CreateEventW
CreateMutexW

ole32

CoInitializeEx
CoTaskMemRealloc
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
StringFromGUID2
PropVariantClear

setupapi

SetupDiDestroyDeviceInfoList
CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
SetupDiEnumDeviceInterfaces
CM_Get_Sibling
SetupDiGetClassDevsW
CM_Get_Parent
CM_Get_Device_IDW
CM_Locate_DevNodeW
SetupDiGetDeviceInterfaceDetailW

advapi32

RegEnumKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyW

oleaut32

VarUI4FromStr
UnRegisterTypeLi
RegisterTypeLi
SysStringLen
LoadTypeLi
SysAllocString
SysFreeString

Exports

Exports

ASTFromString
EvalCode
LookupError
Number_TrueDivide
SaveThread
_ascii_strtod
set_convert_mono
set_crc_action

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a672c66ead0e26237b101fca82cce524

Headers

File Characteristics

Imports

kernel32

ole32

setupapi

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 448KB - Virtual size: 448KB

.rsrc Size: 160KB - Virtual size: 159KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 448KB - Virtual size: 448KB

.rsrc
Size: 160KB - Virtual size: 159KB

.reloc
Size: 8KB - Virtual size: 7KB