eb114462020f7220cdbdee90c445677e8ca98e44993fa16283308cc478be1edc

Sharing

Copy URL Twitter E-mail

General

Target

eb114462020f7220cdbdee90c445677e8ca98e44993fa16283308cc478be1edc
Size

120KB
MD5

27c73dfe265adfa324b1b250ff12f830
SHA1

0954dfd569b9f8acdeaa61231ae2088ae7fc3eb5
SHA256

eb114462020f7220cdbdee90c445677e8ca98e44993fa16283308cc478be1edc
SHA512

53205a21695a135ee39d05423cf51055576447cf9b3005362c16b7e23eaabdb42b4aa6e28eacdbe2ea5c4ba598ddd958608897f3daceacbd084de4945eb2c335
SSDEEP

3072:Os6J4rvQwlodn2dU5u1CfuyGy+vdrKUgwXgL:OuTbnDUVY4UgwQ

Score

N/A

Malware Config

Signatures

Files

eb114462020f7220cdbdee90c445677e8ca98e44993fa16283308cc478be1edc
.dll windows x86

f44ac59d7685831bc43113aef7e3f09b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeFormatW
GetDateFormatW
GetModuleHandleW
FormatMessageW
InterlockedExchange
SetUnhandledExceptionFilter
LocalFree
WriteFile
lstrlenW
UnhandledExceptionFilter
TerminateProcess
InitializeCriticalSectionAndSpinCount
Sleep
GetStdHandle
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
HeapAlloc
GetEnvironmentStringsW
WriteConsoleW
GetCurrentProcess
VirtualProtect
InterlockedDecrement
GetFileAttributesW
CreateFileW
SetFilePointer
DisableThreadLibraryCalls
GetCommandLineA
InterlockedCompareExchange
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
RtlUnwind
GetVersion
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeW

user32

SendMessageW
GetWindowLongW
GetDlgItem
LoadStringW
GetDlgCtrlID
SendDlgItemMessageW
SetWindowLongW
InvalidateRect
SetFocus
EnableWindow
SetDlgItemTextW
WinHelpW
EndDialog

advapi32

RegQueryValueExW
ReportEventA
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

ole32

CoUninitialize
CoInitialize
CoTaskMemFree

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f44ac59d7685831bc43113aef7e3f09b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 44KB - Virtual size: 78KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 44KB - Virtual size: 78KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 3KB - Virtual size: 2KB