be2e4683f2dca81a4d86bb0c1a368eac27eb73099221bf684f9d803eb8369a42

General

Target

be2e4683f2dca81a4d86bb0c1a368eac27eb73099221bf684f9d803eb8369a42
Size

165KB
MD5

5b2242922c457720e04341d326701280
SHA1

3d6af3356429506e5d171be2534390f58fcc42a3
SHA256

be2e4683f2dca81a4d86bb0c1a368eac27eb73099221bf684f9d803eb8369a42
SHA512

8e5b9f0aac66f15918e60219f1b0eec12c133a9cd485470181874306fef6f8037b4d2be02f309462ad4ca709ddd96308ded9d4fd080728c3e186b2e7222f78dc
SSDEEP

3072:/DEH79xoT+zhbUxFTvAO//PE/uEaha2Nr8d2FR+QyWbxgc9Ip/L4BTaOUC8hRof7:1r19yW/9xBT+hhRiE9HSUjXY

Score

N/A

Malware Config

Signatures

Files

be2e4683f2dca81a4d86bb0c1a368eac27eb73099221bf684f9d803eb8369a42
.dll windows x86

1ba15faf0c6f7032aae6e09d48082c18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
InterlockedIncrement
GetProcAddress
GetUserDefaultLCID
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
VirtualQuery
IsBadStringPtrA
GetComputerNameA
IsDBCSLeadByte
GetACP
GetVersionExA
Sleep
QueryPerformanceCounter
IsBadReadPtr
IsDebuggerPresent

user32

GetCursor
IsWindowUnicode
GetWindowContextHelpId
GetWindowTextA
IsCharUpperA
WindowFromDC
GetIconInfo
CopyIcon
GetDlgItem
GetLastActivePopup
GetWindowInfo
GetWindowThreadProcessId
GetTopWindow
IsZoomed
IsIconic
GetGUIThreadInfo
IsMenu
InSendMessage
BlockInput

advapi32

InitializeSecurityDescriptor
AreAnyAccessesGranted
IsValidSid

msvcrt

_adjust_fdiv
malloc
_initterm
free
memchr
_ultoa
rand
ldiv
_itoa
__mb_cur_max
__doserrno
_CItanh
time
modf
frexp
_pctype
_isctype
div

gdi32

GetPixel
GetROP2
GetBkMode
GetBitmapDimensionEx

ole32

CoFileTimeNow
CoRevertToSelf

shell32

DuplicateIcon
ord524

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ba15faf0c6f7032aae6e09d48082c18

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

gdi32

ole32

shell32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 70KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 70KB

.reloc
Size: 2KB - Virtual size: 2KB