a5ea4cc7a137028dab7fb0a12d0f73044bbf26370ea84a143c7d3ba1af76ee95

General

Target

a5ea4cc7a137028dab7fb0a12d0f73044bbf26370ea84a143c7d3ba1af76ee95
Size

114KB
MD5

f9f68724e06878631e27263ca0b119c6
SHA1

34cd96d137587cb2314336a65490aabe7a8a7f1d
SHA256

a5ea4cc7a137028dab7fb0a12d0f73044bbf26370ea84a143c7d3ba1af76ee95
SHA512

739b9176d2ae4a9ed5c4630e2274ddda924d350944d6804c29d7409eb99c716be8b0d9727a0aa0af8f8d310c10492260de8c8a4ce3e8cb2d27e421efd40ccfba
SSDEEP

3072:rJ3E4swrtxBLePBmNIsX5Xu5YhOBokp0ZYQ:V3E4TvBLpNrpXhso4

Score

N/A

Malware Config

Signatures

Files

a5ea4cc7a137028dab7fb0a12d0f73044bbf26370ea84a143c7d3ba1af76ee95
.dll windows x86

94541690694ae688dafbb184e0e58c5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentThreadId
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLastError
SetLastError
GetCurrentProcess
GetModuleHandleA
GetProcAddress
UnhandledExceptionFilter
GetLocaleInfoW

user32

DialogBoxParamW
EndDialog
SetWindowPos
SendMessageW
DefWindowProcW
GetWindowTextW
EndPaint
DrawTextW
BeginPaint
SetCursor
SetWindowLongW
GetWindowLongW
SetWindowTextW
GetDlgItem
LoadStringW
LoadCursorW
GetClientRect

gdi32

SetTextColor
SelectObject
CreateFontIndirectW
GetObjectW
SetBkMode

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

ShellExecuteW

msvcr80

__dllonexit
_lock
_onexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
memset
??2@YAPAXI@Z
_wcsicmp
_encode_pointer
_malloc_crt
_encoded_null
free
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook

Exports

Exports

IsDotNetInstalled

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94541690694ae688dafbb184e0e58c5e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcr80

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 876B

.rsrc Size: 102KB - Virtual size: 102KB

.reloc Size: 1024B - Virtual size: 648B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 876B

.rsrc
Size: 102KB - Virtual size: 102KB

.reloc
Size: 1024B - Virtual size: 648B