8c08bd1163c32155403af3f14ed92465c9297b5683151a4dbb7f85b8d6b2df0c

Sharing

Copy URL

Twitter E-mail

General

Target

8c08bd1163c32155403af3f14ed92465c9297b5683151a4dbb7f85b8d6b2df0c
Size

68KB
MD5

c5bd0aa811151fd24db796ea1b7e3fc0
SHA1

bfbbacda391378583762d85134482e71bea7297b
SHA256

8c08bd1163c32155403af3f14ed92465c9297b5683151a4dbb7f85b8d6b2df0c
SHA512

57ec1b3e4d4fa4c5d5f16da28930bb8ab91dff1b03ae4c1f7832e810f9091faa53617f18bc5e22cd8b5c74cae6d159917709d3e0d0f909fae8178735696b0656
SSDEEP

768:efwWPL4THhELf6b75KR860Qk4OkBYCkwGlL5h3LVwd1B7:eIWPL4THh6Q7m8FR2YlZLVwdP

Score

N/A

Malware Config

Signatures

Files

8c08bd1163c32155403af3f14ed92465c9297b5683151a4dbb7f85b8d6b2df0c
.dll windows x86

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceExA
GetModuleHandleA
GetProcAddress
SetEvent
OpenEventA
CloseHandle
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcessId

user32

ActivateKeyboardLayout
DefWindowProcA
PostMessageA
IsWindow
CreateWindowExA
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
ShowWindow

msvcrt

_adjust_fdiv
malloc
_initterm
free
sprintf

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

g(PTS%hV
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$5:JB"la
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NI<vl$L*
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

"pI(Nxqm
Size: 4KB - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

X>o!v>6d
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LW6:&?f
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2878a4492081d8908c1ed98d81c5f033

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

g(PTS%hV Size: 8KB - Virtual size: 4KB

0Yuj<kIr Size: 4KB - Virtual size: 1KB

$5:JB"la Size: 4KB - Virtual size: 588B

NI<vl$L* Size: 4KB - Virtual size: 528B

"pI(Nxqm Size: 4KB - Virtual size: 298B

X>o!v>6d Size: 36KB - Virtual size: 34KB

LW6:&?f Size: 4KB - Virtual size: 104B

g(PTS%hV
Size: 8KB - Virtual size: 4KB

0Yuj<kIr
Size: 4KB - Virtual size: 1KB

$5:JB"la
Size: 4KB - Virtual size: 588B

NI<vl$L*
Size: 4KB - Virtual size: 528B

"pI(Nxqm
Size: 4KB - Virtual size: 298B

X>o!v>6d
Size: 36KB - Virtual size: 34KB

LW6:&?f
Size: 4KB - Virtual size: 104B