ef942187cebcc37deb297dac840bdb2d36faf93be8cbf02ba8fa9e75d966a2f1

Sharing

Copy URL

Twitter E-mail

General

Target

ef942187cebcc37deb297dac840bdb2d36faf93be8cbf02ba8fa9e75d966a2f1
Size

364KB
MD5

827b403815b3133eedd18555227846a0
SHA1

0bdb38a1dd2584c50c7369ba9eadcb75ecfb49a1
SHA256

ef942187cebcc37deb297dac840bdb2d36faf93be8cbf02ba8fa9e75d966a2f1
SHA512

74a2ad7e3daed6e4dd6b42e5cad64abbfd2566d0be1ab137d9d9c6595d30dde7f2079e2190ec58ff1ecad40b88d3675d54d88042de7590ef6d073539b1f4a39f
SSDEEP

6144:uGosgMTDCwFK7chjfXDjGTelZ93qa84Kpjj7oG5htkmYc180nIVJ0A+kAdpsJL:uGos3Yo92TwYa8NNjUmhtI6Ly0A+ol

Score

N/A

Malware Config

Signatures

Files

ef942187cebcc37deb297dac840bdb2d36faf93be8cbf02ba8fa9e75d966a2f1
.dll windows x86

68a1264bd799aec6c448153072eec91c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_CIatan
tolower
qsort
memset
memmove
malloc
iswspace
iswpunct
iswdigit
free
floor
_wexecle
_vsnwprintf
_unlock
_stricmp
_purecall
_CIacos
_lock
_isnan
_initterm
_finite
_controlfp
_chgsign
_amsg_exit
__p___mb_cur_max
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
_CIsqrt
_CIsin
_CIcos
_CIatan2

advapi32

LsaLookupNames
RegEnumKeyExA
RegQueryValueExA
RegCloseKey

ole32

CreateStreamOnHGlobal

gdi32

SetMapMode
SetBkMode
MoveToEx
GetTextMetricsW
GetObjectW
GetObjectA
GetGlyphOutlineA
GetFontLanguageInfo
GetClipBox
GetCharacterPlacementW
SetTextAlign
GdiGetPageCount
GdiGetBatchLimit
ExtTextOutW
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
SetTextColor
StretchBlt
TranslateCharsetInfo
GetCharacterPlacementA
SetBkColor

kernel32

GetModuleHandleA
GetModuleFileNameA
GetProcAddress
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalHandle
GetFileSizeEx
GetFileSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsSystemResumeAutomatic
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
GetLastError
CloseHandle
CreateFileA
CreateMutexA
CreateThread
DebugBreak
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FindResourceW
FreeLibrary
GetACP
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

Exports

Exports

FreeColumn
HelperGetCurrentRowMessage
ReadLoadResolutions
SchemaAddRef
SchemaGetPropertyInfoByIndex
SetProgress
SpeedOfSound
TypeCopyConstruct
mpegInGetNextFrameExisting

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68a1264bd799aec6c448153072eec91c

Headers

File Characteristics

Imports

msvcrt

advapi32

ole32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 162KB - Virtual size: 162KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 162KB - Virtual size: 162KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 4KB - Virtual size: 4KB