c01b2c6d58a7e037ac2e09e48e4c6a76c8d79d4fba71db6f1564b84818eea8f2

Sharing

Copy URL Twitter E-mail

General

Target

c01b2c6d58a7e037ac2e09e48e4c6a76c8d79d4fba71db6f1564b84818eea8f2
Size

175KB
MD5

e3feb2f14810996f27cb52544cd67f0e
SHA1

bf555598d1ed76f236b1bb6329d7a4987ca0791f
SHA256

c01b2c6d58a7e037ac2e09e48e4c6a76c8d79d4fba71db6f1564b84818eea8f2
SHA512

a70d85d1874e4486a6471da3a1e9b07c043e059cf80b8706fde2ff074e2bf7d966fcd1cdc877ae9d5d91cb620f1177f9bb14721205d01fd83fc93d3e798c0cff
SSDEEP

3072:kmg4Z20g+//0nXN8ur/6J8fs02OyrlgfEfsGyO3JQ7UuJDVUGlh:hgRv3nXN8urSJ8aOyJgfNcruVU6

Score

N/A

Malware Config

Signatures

Files

c01b2c6d58a7e037ac2e09e48e4c6a76c8d79d4fba71db6f1564b84818eea8f2
.dll windows x86

0bf7c1e14033b2a860f7609898675554

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
ExitProcess
FatalAppExitA
GetACP
GetCommandLineA
GetCurrentDirectoryA
GetDriveTypeA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
IsBadReadPtr
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
UnhandledExceptionFilter
VirtualFree

user32

FindWindowA
CloseClipboard
SetDlgItemTextA
ReleaseCapture
PtInRect
PeekMessageA
GetDlgCtrlID
GetDC
GetClassNameA
FindWindowExA

winmm

joySetThreshold
joyGetDevCapsA

ole32

CreateAntiMoniker
CoTaskMemAlloc
CoCreateGuid
CoGetMalloc
CoFileTimeNow
CoCreateInstance

advapi32

RegDeleteValueW
LookupPrivilegeValueW
InitiateSystemShutdownW
ElfRegisterEventSourceW
AddUsersToEncryptedFile
BuildImpersonateTrusteeA
BuildTrusteeWithObjectsAndSidW
BuildTrusteeWithSidA
CryptDestroyHash
CryptGetHashParam
LsaQueryInfoTrustedDomain

shlwapi

StrToIntA
StrStrW
PathStripPathA

oleaut32

VarBstrCat
SysFreeString
SafeArrayCreate
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
RegisterTypeLi
OleTranslateColor
OleLoadPicturePath
GetErrorInfo
ClearCustData

Exports

Exports

GetExposureCompCount
GetNumHarddisks

Sections

.text
Size: 113KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bf7c1e14033b2a860f7609898675554

Headers

File Characteristics

Imports

kernel32

user32

winmm

ole32

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 212KB

.data Size: 58KB - Virtual size: 60KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 113KB - Virtual size: 212KB

.data
Size: 58KB - Virtual size: 60KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB