364056eb1848ebc3ba239b03a52814d2c72afb20ba6926efdb99f06816549679

Sharing

Copy URL Twitter E-mail

General

Target

364056eb1848ebc3ba239b03a52814d2c72afb20ba6926efdb99f06816549679
Size

120KB
MD5

8f00c13783a826002b82868235ef3470
SHA1

fad788e5cc412cb24368b0407c09f186f19d686b
SHA256

364056eb1848ebc3ba239b03a52814d2c72afb20ba6926efdb99f06816549679
SHA512

38855076919f1504263cd1e5f20e6c5a6c7a34c0346bd52989c4a3d51dffec9840e1186bf817a3359efc6a300eefbd842ae173974ed1b40184819f55888c6d32
SSDEEP

3072:ZAqA0c27RdJ/q5MJBrNfNLH+VsFrU55L+FIy88Ss:NA0b7RdJoMJX9H+Vsm3L+Fl88P

Score

N/A

Malware Config

Signatures

Files

364056eb1848ebc3ba239b03a52814d2c72afb20ba6926efdb99f06816549679
.dll windows x86

62a6a2f67e4bfabaa302110ec0bb5eac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
FormatMessageW
GetLastError
CreateProcessW
FlushFileBuffers
WideCharToMultiByte
CreateFileW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
LoadLibraryW
CloseHandle
GetVersionExW
HeapReAlloc
RtlUnwind
MultiByteToWideChar
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EncodePointer
HeapAlloc
RaiseException
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

DdeUninitialize
DdeCreateDataHandle
DdeClientTransaction
DdeFreeDataHandle
DdeCreateStringHandleW
DdeGetLastError
WaitForInputIdle
MessageBoxW
DdeDisconnect
DdeFreeStringHandle
DdeInitializeW
LoadStringW
InsertMenuW
DdeConnect

advapi32

RegQueryValueW

shell32

DragQueryFileW
ShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62a6a2f67e4bfabaa302110ec0bb5eac

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 68KB - Virtual size: 75KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 68KB - Virtual size: 75KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB