b4fbaded689d962759133b2554e553f0df22499a7226ca448f258871e1f5770a

General

Target

b4fbaded689d962759133b2554e553f0df22499a7226ca448f258871e1f5770a
Size

238KB
MD5

6f6fae7f83f849acef0aedd3fe255daf
SHA1

ffdb6d0d2ac7f3c3e0bc1ad7ef27cad4692dd65f
SHA256

b4fbaded689d962759133b2554e553f0df22499a7226ca448f258871e1f5770a
SHA512

0dcb9b3111afee934571eb865ec61c3aa3cc1540fa5247fad4b5b2cffef148be2d23e032691612e90926ce6642fd6bf129e2ae77b7385cb1a011ec0b3c4e64cd
SSDEEP

3072:kZje6T7yLVcaaZc3CfJS3LWWsKK1hob6aKwXnMB9KXWt1:Mq1ca6+DsK8ho65f9z

Score

N/A

Malware Config

Signatures

Files

b4fbaded689d962759133b2554e553f0df22499a7226ca448f258871e1f5770a
.dll windows x86

9e717d060689ddb4ba94117728374297

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
lstrcpyA
LoadResource
CloseHandle
VirtualAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
GetLastError
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

user32

GetDC
DestroyWindow
GetDesktopWindow
UnregisterClassA
SetWindowLongA
PtInRect
CharNextA
PostMessageA

gdi32

LPtoDP

Exports

Exports

Abfks932JdI
Asdfgsdfadfw

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e717d060689ddb4ba94117728374297

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 91KB - Virtual size: 269KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 91KB - Virtual size: 269KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 4KB - Virtual size: 3KB