ca4aa39d618985cf6eb55d64576f32ee282daadb33df894261fb4563be2d61f8

Sharing

Copy URL

Twitter E-mail

General

Target

ca4aa39d618985cf6eb55d64576f32ee282daadb33df894261fb4563be2d61f8
Size

357KB
MD5

db2638e4b951d4a5184079b95c8f7190
SHA1

40b3704e79813797ae3b88ebc30c853e8190e313
SHA256

ca4aa39d618985cf6eb55d64576f32ee282daadb33df894261fb4563be2d61f8
SHA512

df59cfa0691fbe07b0b9c4ffadacdcbb284a73eabc445e6bb07cb110b934759434266fe001f9e7b0aca3899a1608e713eb9fa4a386bd12d865eac3a7baf5c215
SSDEEP

6144:8gGfSjNHDXQrldCDwsPZBpR1Tqe6FdLVV/WoaxZdXtKE2quVvhl:nbNHDAJdCVDyFVEfaH

Score

N/A

Malware Config

Signatures

Files

ca4aa39d618985cf6eb55d64576f32ee282daadb33df894261fb4563be2d61f8
.dll windows x86

def5ca352aebf0a39660a3c4fbe6071b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

RegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
LoadTypeLi

user32

CharNextW

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

ole32

CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
CoCreateInstance

kernel32

VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrcmpiW
lstrlenW
GetModuleFileNameA
TerminateProcess
Sleep
SizeofResource
SetThreadLocale
SetStdHandle
CloseHandle
CreateFileA
EnterCriticalSection
ExitProcess
FindResourceW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetVersionExA
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
RtlUnwind
SetEvent
SetFilePointer
SetHandleCount
SetLastError

Exports

Exports

Check
Int_ClearFreeList
Repr
TabError
level

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

def5ca352aebf0a39660a3c4fbe6071b

Headers

File Characteristics

Imports

oleaut32

user32

advapi32

ole32

kernel32

Exports

Exports

Sections

.text Size: 141KB - Virtual size: 140KB

.rdata Size: 107KB - Virtual size: 106KB

.data Size: 68KB - Virtual size: 70KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 141KB - Virtual size: 140KB

.rdata
Size: 107KB - Virtual size: 106KB

.data
Size: 68KB - Virtual size: 70KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 15KB - Virtual size: 14KB