a43064e3335a475891bcf881bfcfd63d2746a726339ae50d083a21cfcf7a7859

General

Target

a43064e3335a475891bcf881bfcfd63d2746a726339ae50d083a21cfcf7a7859
Size

165KB
MD5

6aba019f535d09df199f900a61851400
SHA1

0f0ea1591a219ed62e639132521cbeeb9fbd515c
SHA256

a43064e3335a475891bcf881bfcfd63d2746a726339ae50d083a21cfcf7a7859
SHA512

7e0576598896bfb3f4a714378ec2cef411582520f00849768cb033ee9ad4d0593f6d14342ded635162aee66d13dbe5d7c8201b1181ecdedf5fc820add8a4e2f1
SSDEEP

3072:+/5E60KXnXhddhoqAtULVMtpJW+PIeii72sxPzhO8k6YWsC8VTd/ThWlA0JRz7:U5p0KdDtLKtpJFILroPzhO71+I1FWu0r

Score

N/A

Malware Config

Signatures

Files

a43064e3335a475891bcf881bfcfd63d2746a726339ae50d083a21cfcf7a7859
.dll windows x86

966ac1ed20dde3fca048dd3f6ed32ff2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
LoadLibraryA
InterlockedIncrement
GetProcAddress
GetStartupInfoA
GetUserDefaultLCID
MulDiv
GetLocalTime
VirtualAlloc
VirtualProtect
VirtualQuery
DosDateTimeToFileTime
GetCurrentProcess
GetCurrentThreadId
Sleep
QueryPerformanceFrequency
IsDebuggerPresent
SetLastError
IsBadCodePtr
GetComputerNameA

user32

GetMenuContextHelpId
GetWindowContextHelpId
GetWindowTextA
GetWindowDC
IsClipboardFormatAvailable
GetDC
WindowFromDC
GetForegroundWindow
GetIconInfo
GetDlgItem
GetAncestor
GetTitleBarInfo
GetWindow
GetLastActivePopup
GetWindowThreadProcessId
IsZoomed
GetGUIThreadInfo
IsChild
IsMenu
IsCharUpperA

advapi32

IsValidSecurityDescriptor
InitializeSecurityDescriptor
IsValidSid

msvcrt

_adjust_fdiv
malloc
_initterm
free
memchr
_swab
_ultoa
__mb_cur_max
srand
_set_error_mode
rand
ldiv
_errno
_CIpow
time
modf
_pctype
_isctype
_CItanh

gdi32

GetPixel
GdiFlush
GetBkColor

shell32

ord680
ord64

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

966ac1ed20dde3fca048dd3f6ed32ff2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

shell32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 66KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 66KB

.reloc
Size: 3KB - Virtual size: 2KB