a190e41402187ba49443a3b160eb0266e1500b7c7bf551c34f71e090eaff298e

Sharing

Copy URL

Twitter E-mail

General

Target

a190e41402187ba49443a3b160eb0266e1500b7c7bf551c34f71e090eaff298e
Size

432KB
MD5

7935d993b741f199d3f3e7c0ec87f570
SHA1

9c29f78b8a621133547eb20fbc4fc43eba405c9f
SHA256

a190e41402187ba49443a3b160eb0266e1500b7c7bf551c34f71e090eaff298e
SHA512

165e282f2ff35014048243b8c0ecd306022e0f0430b9fdd9055295d24921a1db720c543cbb66ba92016c2e27fe6800bff8d01768bb4881d5802a3bea82e4e077
SSDEEP

6144:BFG2MBlP4Na/plKQSrQduDTyZhy684NAvuw+HoK3xbokwrqGzUEaiucap4nrrcMa:rUTPfHxduDDv4mT83wxHadPpF

Score

N/A

Malware Config

Signatures

Files

a190e41402187ba49443a3b160eb0266e1500b7c7bf551c34f71e090eaff298e
.dll windows x86

0ec1f272dfb8a225bbcb27424a3c2ec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx

oleaut32

RegisterTypeLi
SysStringLen
LoadTypeLi
SysAllocString
UnRegisterTypeLi
SysFreeString
VarUI4FromStr

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW

kernel32

LeaveCriticalSection
MultiByteToWideChar
ReadFile
InterlockedIncrement
GetModuleFileNameW
lstrlenW
EnterCriticalSection
InterlockedExchange
LoadResource
GetSystemTimeAsFileTime
QueryPerformanceCounter
RaiseException
WideCharToMultiByte
GetVersionExA
GetModuleHandleA
SetEvent
lstrcmpiW
GetCurrentProcessId
CreateFileW
LocalFree
FreeLibrary
GetLastError
GetModuleHandleW
WaitForSingleObject
CloseHandle
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetUnhandledExceptionFilter
InterlockedCompareExchange
TerminateProcess
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
GetDateFormatA
GetTickCount

shell32

ShellExecuteW

Exports

Exports

Long_AsDouble
Module_Type
SetError
convert_to_rfc1123
get_image_height
write_info
write_init_3

Sections

.text
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ec1f272dfb8a225bbcb27424a3c2ec1

Headers

File Characteristics

Imports

ole32

oleaut32

advapi32

kernel32

shell32

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 207KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 68KB - Virtual size: 68KB

.rsrc Size: 60KB - Virtual size: 59KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 208KB - Virtual size: 207KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 12KB - Virtual size: 10KB