c795f9bf75e3fb9a047ff5f0565b8e3d0c67d20650f10a1649a2dc6d4ba62364

Sharing

Copy URL

Twitter E-mail

General

Target

c795f9bf75e3fb9a047ff5f0565b8e3d0c67d20650f10a1649a2dc6d4ba62364
Size

26KB
MD5

7fff38145c4af7585f1734f4cf980a30
SHA1

57ae962ebb2d193dbbd18af25c17e3c276afe59a
SHA256

c795f9bf75e3fb9a047ff5f0565b8e3d0c67d20650f10a1649a2dc6d4ba62364
SHA512

a1410b05507860a5413af122577ce26549b1b8634db4fcfe259b241d059b16a8e053a1b95e2e29b49be63d2b17a5164f92c9cad384819640f839e137f3eedabc
SSDEEP

768:Zu62DQ9zMu68cDZ3Sq9fK+RZkqS7MXbt/c:8DQ9B4Sq9fXDkqPtE

Score

N/A

Malware Config

Signatures

Files

c795f9bf75e3fb9a047ff5f0565b8e3d0c67d20650f10a1649a2dc6d4ba62364
.dll windows x86

42207acd9f7ddd76ee8de510758d7232

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord1255

msvcrt

_access

user32

ReleaseDC

gdi32

CreateCompatibleDC

advapi32

RegSetValueExA

urlmon

URLDownloadToFileA

ws2_32

inet_addr

wininet

InternetReadFile

gdiplus

GdipGetImageEncoders

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference
HidservInstaller
init

Sections

.text
Size: 14KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

42207acd9f7ddd76ee8de510758d7232

Headers

File Characteristics

Imports

kernel32

mfc42

msvcrt

user32

gdi32

advapi32

urlmon

ws2_32

wininet

gdiplus

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 48KB

.rsrc Size: 7KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 8KB

.text
Size: 14KB - Virtual size: 48KB

.rsrc
Size: 7KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 8KB