a9742c078e1e085eed4511a093c20dae06b2307da858d24fc43e020cb6a62ed1

General

Target

a9742c078e1e085eed4511a093c20dae06b2307da858d24fc43e020cb6a62ed1
Size

362KB
MD5

f095006440efeeacf392365dc0cc735b
SHA1

bd6fa8463896efeea87a996579136f70165d53ae
SHA256

a9742c078e1e085eed4511a093c20dae06b2307da858d24fc43e020cb6a62ed1
SHA512

4c66fae255189f48e814e3897a71a870ed11bbb778c215527a7b0dae52928a81663cbc7d5f238987982cacf69dc2bd5064c9534ff45dae0be6f2735eb5c9a3c2
SSDEEP

6144:Ug4Q2kuFEax9SnVbeS3fDNACpV2TqIRY0q4F8S/YBm8VG9Q2EO09ZD:L2kuEaxJS3fDNACpV2Wiu4l/YHmMpZD

Score

N/A

Malware Config

Signatures

Files

a9742c078e1e085eed4511a093c20dae06b2307da858d24fc43e020cb6a62ed1
.dll windows x86

461ecaceb4dc654943fb07d0ae199693

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
ExitProcess
GetLastError
CreateDirectoryA
ReadFile
SetFilePointer
DeleteFileA
MoveFileExA
GetCurrentThreadId
GetModuleFileNameA
GetProcAddress
LoadLibraryA
HeapAlloc
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

shell32

SHGetFolderPathA

Exports

Exports

_DllMain@12

Sections

.text
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

461ecaceb4dc654943fb07d0ae199693

Headers

File Characteristics

Imports

kernel32

shell32

Exports

Exports

Sections

.text Size: 343KB - Virtual size: 342KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 7KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 343KB - Virtual size: 342KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 7KB

.reloc
Size: 5KB - Virtual size: 4KB