20a94fe703e3f78fca55c3a299636072322f510746b597ca3d0e1febe5cd2f05

Sharing

Copy URL Twitter E-mail

General

Target

20a94fe703e3f78fca55c3a299636072322f510746b597ca3d0e1febe5cd2f05
Size

456KB
MD5

32df106f985dfe23920f1d70fe6cdaf0
SHA1

4f924a5d90e0cb41891d9875258acce92f9924e5
SHA256

20a94fe703e3f78fca55c3a299636072322f510746b597ca3d0e1febe5cd2f05
SHA512

f7e9bbd57286a96ddeee9ba257530dba544eab2e7f50d63e50add93c3063821a4fd1ad48bad8922e2ac8608b0ecf49a97b4c66f04f27668f98686123a095b9ef
SSDEEP

6144:H1YzbTWvii4zjBiw3VqLXyuqXZbvp9UT5QxUNckGQC9G9EfotyuZXpjuyBhm9qNC:VYzby0cw3LuAZEQ4WM2SyUj34BlR

Score

N/A

Malware Config

Signatures

Files

20a94fe703e3f78fca55c3a299636072322f510746b597ca3d0e1febe5cd2f05
.dll windows x86

e32ba79a1dda6ecc574e3bfa32dcbeaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
UnRegisterTypeLi
SysStringLen
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysFreeString

shell32

ShellExecuteW

ole32

CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW

kernel32

WideCharToMultiByte
VirtualAlloc
QueryPerformanceCounter
GetDateFormatA
lstrcmpiW
LeaveCriticalSection
GetCurrentProcessId
CloseHandle
TerminateProcess
InterlockedExchange
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
InterlockedCompareExchange
ReadFile
GlobalAlloc
Sleep
GetCurrentThreadId
LoadResource
LocalFree
GetLastError
DeviceIoControl
MultiByteToWideChar
GetModuleFileNameW
lstrlenW
CreateFileW
GetModuleHandleA
SetEvent
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
GetModuleHandleW
EnterCriticalSection
WaitForSingleObject
FreeLibrary
RaiseException
LocalAlloc
InterlockedDecrement
GetVersionExA
InterlockedIncrement

Exports

Exports

Format
InPlaceRemainder
RealAsDouble
RichGetCompare
set_shift

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e32ba79a1dda6ecc574e3bfa32dcbeaf

Headers

File Characteristics

Imports

oleaut32

shell32

ole32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 68KB - Virtual size: 68KB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 8KB - Virtual size: 7KB