b1cd6768b3cd8caa1efc60164a2dabc70601560325f2d81974f7c82406ff8c20

General

Target

b1cd6768b3cd8caa1efc60164a2dabc70601560325f2d81974f7c82406ff8c20
Size

26KB
MD5

5444be6a06c0fabe8185326795729954
SHA1

e69eb9eb09e10fe4dd36fe0848ce106a91fce837
SHA256

b1cd6768b3cd8caa1efc60164a2dabc70601560325f2d81974f7c82406ff8c20
SHA512

eb732546f17aa3c06ff5ba182508ec17a1141405c95237d58b2dc4a98e2192fa4301fd1a78d328f6e3bcabf0e34a28b803be34a8df003be1e2db620a7428ce55
SSDEEP

768:FXtaBCH1CIKdMRiBnnlSHhVHp+1OXowFF7L:FXtQ01CIKdJBnncHhVHp+1aFL

Score

N/A

Malware Config

Signatures

Files

b1cd6768b3cd8caa1efc60164a2dabc70601560325f2d81974f7c82406ff8c20
.dll windows x86

49895fb59ace3671cfd8674889932dd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
InterlockedDecrement
InterlockedExchangeAdd
GetProcAddress
GetUserDefaultLCID
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
GetTickCount
IsBadWritePtr
IsBadCodePtr
IsDBCSLeadByte
GetACP
Sleep
QueryPerformanceCounter
GetComputerNameA
GetProcessHeap
GetCurrentProcess

user32

GetCursor
IsWindowUnicode
GetMenuContextHelpId
GetWindowRect
IsCharLowerA
GetWindowRgn
WindowFromDC
GetDlgItem
GetTitleBarInfo
GetWindow
GetWindowInfo
GetWindowThreadProcessId
IsZoomed
IsIconic
GetGUIThreadInfo
GetWindowPlacement
IsChild
IsMenu
SetLastErrorEx
InSendMessage

advapi32

IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidAcl

msvcrt

_adjust_fdiv
malloc
_initterm
free
memmove
_memicmp
memchr
_swab
_memccpy
_CIasin
_set_error_mode
_CIpow
_CItanh
frexp
_pctype
_isctype
_hypot
ceil
__mb_cur_max
modf
_errno
_ltoa
rand
_CIfmod

gdi32

GetPixel
GdiGetBatchLimit
GetROP2
GetBitmapDimensionEx

shell32

DuplicateIcon
ord66

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49895fb59ace3671cfd8674889932dd1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 67KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 67KB

.reloc
Size: 3KB - Virtual size: 2KB