1fbe63babc515e864107a2cf0ef74964d3be70757042e3aa720b113695fee1bb

Sharing

Copy URL

Twitter E-mail

General

Target

1fbe63babc515e864107a2cf0ef74964d3be70757042e3aa720b113695fee1bb
Size

68KB
MD5

8b152e0d4e797ce9bdbeede30dde03b0
SHA1

20b5424a4148d95e0d2246d5c601360b09597d6a
SHA256

1fbe63babc515e864107a2cf0ef74964d3be70757042e3aa720b113695fee1bb
SHA512

ff0bfdbeeb19f97f353441d47e144840d455d1fec67d0bafdb11a57b1eae11285b2ea923eecd2a54d116f0ca2e6ecf54d9ebbe9939fe7a17ffab8c3e8d2799c9
SSDEEP

768:N2OPLJkBHhELf6b75KR860Qk4OkBYCkwGlL5h3LVwd1B7:wOPLJkBHh6Q7m8FR2YlZLVwdP

Score

N/A

Malware Config

Signatures

Files

1fbe63babc515e864107a2cf0ef74964d3be70757042e3aa720b113695fee1bb
.dll windows x86

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExA
GetModuleHandleA
GetProcAddress
SetEvent
OpenEventA
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcessId

user32

ActivateKeyboardLayout
DefWindowProcA
PostMessageA
IsWindow
CreateWindowExA
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ShowWindow

msvcrt

_adjust_fdiv
malloc
_initterm
free
sprintf

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

g(PTS%hV
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$5:JB"la
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NI<vl$L*
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

"pI(Nxqm
Size: 4KB - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

X>o!v>6d
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LW6:&?f
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

g(PTS%hV Size: 8KB - Virtual size: 4KB

0Yuj<kIr Size: 4KB - Virtual size: 1KB

$5:JB"la Size: 4KB - Virtual size: 588B

NI<vl$L* Size: 4KB - Virtual size: 528B

"pI(Nxqm Size: 4KB - Virtual size: 298B

X>o!v>6d Size: 36KB - Virtual size: 34KB

LW6:&?f Size: 4KB - Virtual size: 104B

g(PTS%hV
Size: 8KB - Virtual size: 4KB

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

$5:JB"la
Size: 4KB - Virtual size: 588B

NI<vl$L*
Size: 4KB - Virtual size: 528B

"pI(Nxqm
Size: 4KB - Virtual size: 298B

X>o!v>6d
Size: 36KB - Virtual size: 34KB

LW6:&?f
Size: 4KB - Virtual size: 104B