05631ea83adb49f067b55dd418db4f3b2bcbcfe067173aef441fda31c9ec9ec2

Sharing

Copy URL Twitter E-mail

General

Target

05631ea83adb49f067b55dd418db4f3b2bcbcfe067173aef441fda31c9ec9ec2
Size

604KB
MD5

e7d5b12ac6782b5a83d3f9739a088570
SHA1

1fac8c1fcdff1de87086af45738b9d40a5188989
SHA256

05631ea83adb49f067b55dd418db4f3b2bcbcfe067173aef441fda31c9ec9ec2
SHA512

5f4c6730d7ea397c4d3c09cbbdc99d98b0b0c26d9be965824d8262a5bde73b6cc570a4e15f6ffe0bee209703e4154d3003c317fc1d88b32553133426d0337330
SSDEEP

12288:qgA8hvTkEH82AKZPKm9huz8VINhz7Z1DjehrXJ:y89T2zKFKucz8Vsz7TE

Score

N/A

Malware Config

Signatures

Files

05631ea83adb49f067b55dd418db4f3b2bcbcfe067173aef441fda31c9ec9ec2
.dll windows x86

50a0db25f9d9296e54a71518a9cff73a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoUninitialize
CoInitializeEx
CoInitialize
CoCreateInstance

oleaut32

VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi

kernel32

lstrlenW
WideCharToMultiByte
WaitForSingleObject
VirtualAlloc
UnhandledExceptionFilter
CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetTickCount
GetVersionExA
GlobalAlloc
InitializeCriticalSection
InterlockedCompareExchange
TzSpecificLocalTimeToSystemTime
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadResource
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
SetConsoleCursorPosition
SetEvent
SetUnhandledExceptionFilter
InterlockedDecrement

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHGetSpecialFolderLocation
ShellExecuteW
SHAddToRecentDocs

Exports

Exports

GetFlags
SetInterrupt
SystemExit
UnicodeWarning
_Fini
read_row

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50a0db25f9d9296e54a71518a9cff73a

Headers

File Characteristics

Imports

ole32

oleaut32

kernel32

advapi32

shell32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 68KB - Virtual size: 66KB

.data Size: 196KB - Virtual size: 196KB

.rsrc Size: 156KB - Virtual size: 155KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 68KB - Virtual size: 66KB

.data
Size: 196KB - Virtual size: 196KB

.rsrc
Size: 156KB - Virtual size: 155KB

.reloc
Size: 8KB - Virtual size: 7KB