a634ddd0eb0362e5602c8faefacee706cb712852b03c25b531f4c1e26812fec2

General

Target

a634ddd0eb0362e5602c8faefacee706cb712852b03c25b531f4c1e26812fec2
Size

183KB
MD5

f3a7e0416209720dd7f497505272da33
SHA1

ebbe96100427b00f5483e533af120c283f99a379
SHA256

a634ddd0eb0362e5602c8faefacee706cb712852b03c25b531f4c1e26812fec2
SHA512

c88da7c889217f4a52923757ad5d8cac908037c6977ade32f20e16aad9afd2ae06b0eace8102c17f5769000a753bd72cbf2fec2238b39298ea4336da14fa3f30
SSDEEP

3072:VlLWpvfOtOf1zWifasc5HSelDRfcR4dmyP6WVtqCqvwFTIvKEwXqba+oka2YBQX2:VkvfOtOf1tCni2mQ1XIvKE6YRA2YWX

Score

N/A

Malware Config

Signatures

Files

a634ddd0eb0362e5602c8faefacee706cb712852b03c25b531f4c1e26812fec2
.dll windows x86

1c671a9fd4d31eba73c4a94233e43007

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetPrivateProfileStringW
GetShortPathNameW
GetLastError
WideCharToMultiByte
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

shell32

SHGetFolderPathW

msvcr90

_decode_pointer
_initterm
_initterm_e
_encoded_null
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
_malloc_crt
_encode_pointer
_wmakepath_s
_wsplitpath_s
??2@YAPAXI@Z
strcpy_s
wcscat_s
??3@YAXPAX@Z
_amsg_exit
memset

Exports

Exports

CreateUserLocManager

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c671a9fd4d31eba73c4a94233e43007

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

msvcr90

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 172KB - Virtual size: 172KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 592B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 172KB - Virtual size: 172KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 592B