2283d22d01a06e5b1678ea188d0f75b2dae30b70b79985bfe6ca30c767b4f312

Sharing

Copy URL Twitter E-mail

General

Target

2283d22d01a06e5b1678ea188d0f75b2dae30b70b79985bfe6ca30c767b4f312
Size

68KB
MD5

e28d17af5a2038bdfcec71de3a0868d0
SHA1

c3afd94e101d7ca0418933ab8c84254af971c0da
SHA256

2283d22d01a06e5b1678ea188d0f75b2dae30b70b79985bfe6ca30c767b4f312
SHA512

e54e9e086b1bf09824cfe6510f51d3b26f402932859134a04cfa52558a215268453c58cf343cda536207110c634e8933e9f7589ad82cbff4d88797647ae4c9c7
SSDEEP

768:wYEGPLleHhELf6b75KR860Qk4OkBYCkwGlL5h3LVwd1B7:FEGPLleHh6Q7m8FR2YlZLVwdP

Score

N/A

Malware Config

Signatures

Files

2283d22d01a06e5b1678ea188d0f75b2dae30b70b79985bfe6ca30c767b4f312
.dll windows x86

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExA
GetModuleHandleA
GetProcAddress
SetEvent
OpenEventA
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcessId

user32

ActivateKeyboardLayout
DefWindowProcA
PostMessageA
IsWindow
CreateWindowExA
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ShowWindow

msvcrt

_adjust_fdiv
malloc
_initterm
free
sprintf

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

g(PTS%hV
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$5:JB"la
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NI<vl$L*
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

"pI(Nxqm
Size: 4KB - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

X>o!v>6d
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LW6:&?f
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

g(PTS%hV Size: 8KB - Virtual size: 4KB

0Yuj<kIr Size: 4KB - Virtual size: 1KB

$5:JB"la Size: 4KB - Virtual size: 588B

NI<vl$L* Size: 4KB - Virtual size: 528B

"pI(Nxqm Size: 4KB - Virtual size: 298B

X>o!v>6d Size: 36KB - Virtual size: 34KB

LW6:&?f Size: 4KB - Virtual size: 104B

g(PTS%hV
Size: 8KB - Virtual size: 4KB

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

$5:JB"la
Size: 4KB - Virtual size: 588B

NI<vl$L*
Size: 4KB - Virtual size: 528B

"pI(Nxqm
Size: 4KB - Virtual size: 298B

X>o!v>6d
Size: 36KB - Virtual size: 34KB

LW6:&?f
Size: 4KB - Virtual size: 104B