ac76d896637ba39d2df8d42f4b280fc93beefd3eb8e2a430eaf6177f014692b0

Sharing

Copy URL Twitter E-mail

General

Target

ac76d896637ba39d2df8d42f4b280fc93beefd3eb8e2a430eaf6177f014692b0
Size

53KB
MD5

c1b6891fa17e1486c927a61321894178
SHA1

101647f091cc48abcec023ee754d450375ec7139
SHA256

ac76d896637ba39d2df8d42f4b280fc93beefd3eb8e2a430eaf6177f014692b0
SHA512

22bf313dad74453340ac032be6f1cb040b9323fed7b0a4d249a0946b809a2ffc4a1d4813efed7528eabb81253f6f40194aa54333e7b1799ac9427b256c585da6
SSDEEP

768:ommQ1srsvo/ubXSHKGV/vqtBevsAeSsdlImJgn569LOgqTRPRv:ommgsQQWbXJG3qMGamJF9dqThh

Score

N/A

Malware Config

Signatures

Files

ac76d896637ba39d2df8d42f4b280fc93beefd3eb8e2a430eaf6177f014692b0
.dll windows x86

f5ad2c6adf5db85fcfb12cd2e3d8e9f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcessModules
GetModuleInformation
GetModuleFileNameExA

shlwapi

StrStrA
PathAddBackslashA
StrDupA
StrToIntA

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
_ftime
gmtime
strftime
_set_error_mode
memset
strstr
wcstombs
strcmp
??3@YAXPAX@Z
free
??2@YAPAXI@Z
realloc
memmove
memcmp
strcat
strlen
sprintf
strcpy
memcpy
malloc
_except_handler3

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetSystemDirectoryA
lstrcatA
GetFileTime
SetFileTime
GetTempFileNameA
SetFilePointer
WriteFile
GetFileSize
SetUnhandledExceptionFilter
ExitProcess
GetSystemInfo
GetModuleHandleA
DuplicateHandle
LoadLibraryA
ReadFile
DeleteFileA
GetTickCount
MoveFileExA
ExpandEnvironmentStringsA
CreateFileA
GetFileAttributesA
lstrcpyA
lstrcpyW
lstrlenW
lstrcmpW
lstrcmpA
Process32First
OpenProcess
Process32Next
GetModuleFileNameA
GetVolumeInformationA
GetShortPathNameA
VirtualProtect
GetProcAddress
CreateThread
WaitForSingleObject
ReleaseMutex
Sleep
Thread32Next
ResumeThread
OpenThread
CloseHandle
Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCurrentThreadId
SuspendThread
FlushInstructionCache
GetCurrentProcess
GetTempPathA
VirtualAlloc
CreateMutexA
lstrlenA
MultiByteToWideChar
GetEnvironmentVariableA

user32

DispatchMessageA
TranslateMessage
GetMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegSetValueExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA

ole32

CoInitialize
CoCreateInstance

Exports

Exports

_IWMPEvents@0

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5ad2c6adf5db85fcfb12cd2e3d8e9f7

Headers

DLL Characteristics

File Characteristics

Imports

psapi

shlwapi

msvcrt

version

kernel32

user32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 7KB - Virtual size: 1.5MB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 7KB - Virtual size: 1.5MB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 7KB - Virtual size: 6KB