f2c2b407efdef02f6e512ffc0a3e0a63e02498184ae0c4172a45be21c3ce5dce

Sharing

Copy URL Twitter E-mail

General

Target

f2c2b407efdef02f6e512ffc0a3e0a63e02498184ae0c4172a45be21c3ce5dce
Size

472KB
MD5

ad0cb8f6d84835db94e7ec6b4063cef0
SHA1

08a5b842873f1b40e4098f2392dc467f8cf9e171
SHA256

f2c2b407efdef02f6e512ffc0a3e0a63e02498184ae0c4172a45be21c3ce5dce
SHA512

e2cf03789a05a50f14e0e33859f5eda803f8d4d4e83d857e6834f46f5883086bcc63de41817045ef5f365dfe16e78654d481874be8f14a2183c56a2b528b1ccf
SSDEEP

12288:vo4rLteeAnh/GhrULZ/eu1T8Jdh+K1K9DkjGXD1c/Sej:w41ahWQ+3+K1K6jk9e

Score

N/A

Malware Config

Signatures

Files

f2c2b407efdef02f6e512ffc0a3e0a63e02498184ae0c4172a45be21c3ce5dce
.dll windows x86

47eaf647416bd4d35d7eb19b51b40798

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi
SysFreeString
UnRegisterTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
VarUI4FromStr

shell32

ShellExecuteW

advapi32

RegEnumKeyExW
RegCloseKey
RegQueryValueExW
CryptGetKeyParam
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

ole32

CoTaskMemAlloc
CoInitialize
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoCreateInstance

kernel32

InterlockedExchange
LeaveCriticalSection
DeviceIoControl
GetDateFormatA
CloseHandle
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
LocalAlloc
ReadFile
FreeLibrary
VirtualAlloc
GetTickCount
SetEvent
InterlockedCompareExchange
LoadResource
SetUnhandledExceptionFilter
WideCharToMultiByte
CreateMutexW
QueryPerformanceCounter
lstrcmpiW
GetVersionExA
GlobalAlloc
MultiByteToWideChar
CreateFileW
UnhandledExceptionFilter
Sleep
DeleteCriticalSection
GetModuleHandleA
LocalFree
GlobalFree
RaiseException
InterlockedIncrement
WaitForSingleObject
lstrlenW
GetModuleFileNameW
InterlockedDecrement
GetLastError
TerminateProcess
GetCurrentProcessId
GetModuleHandleW
InitializeCriticalSection

Exports

Exports

List_Reverse
Long_AsVoidPtr
ProgramText
set_gray_to_rgb
set_sRGB

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47eaf647416bd4d35d7eb19b51b40798

Headers

File Characteristics

Imports

oleaut32

shell32

advapi32

ole32

kernel32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 184KB

.rdata Size: 160KB - Virtual size: 159KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 56KB - Virtual size: 55KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 188KB - Virtual size: 184KB

.rdata
Size: 160KB - Virtual size: 159KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 56KB - Virtual size: 55KB

.reloc
Size: 12KB - Virtual size: 8KB