fffb76122b7d939ad5bc96859a7aff26fc53993ed51c0eabaec1f99a3751f487

Sharing

Copy URL Twitter E-mail

General

Target

fffb76122b7d939ad5bc96859a7aff26fc53993ed51c0eabaec1f99a3751f487
Size

139KB
MD5

89ed963997f98979493b7905cd725cd0
SHA1

50b1e1c6712e8b23ec22274da60dabb04fdde36f
SHA256

fffb76122b7d939ad5bc96859a7aff26fc53993ed51c0eabaec1f99a3751f487
SHA512

d94b33ee4ccd25f9ba5d772559d9d70f50f764cc73d034e75ba464f830ac1ce88237e2ba83e06e98be78d0b1286b86400ac89c80d0cf06c1d130ec51e3c14ac1
SSDEEP

3072:/lHDdm4Gp5335I6HcWVXujtJ5ivJxTSMRlDGeoOQmp:/lHo4835I6HcWVXujtJ5ivJxnRgeoh6

Score

N/A

Malware Config

Signatures

Files

fffb76122b7d939ad5bc96859a7aff26fc53993ed51c0eabaec1f99a3751f487
.dll windows x86

f08e039fa3c05b578292d5e5613a40e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetEvent
WaitForSingleObject
GetCurrentThreadId
CreateEventA
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetProcessHeap
ReleaseMutex
CreateMutexA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

winmm

DefDriverProc

comctl32

ord17

Exports

Exports

DriverProc
configureVFW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f08e039fa3c05b578292d5e5613a40e2

Headers

File Characteristics

Imports

kernel32

ole32

winmm

comctl32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 12KB

.tls Size: 56KB - Virtual size: 56KB

.rsrc Size: 1024B - Virtual size: 612B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 12KB

.tls
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 1024B - Virtual size: 612B

.reloc
Size: 8KB - Virtual size: 7KB