b94e30a5ac9d64f54e99574c040ed70b427de4525f1b29741597457292504c5e

General

Target

b94e30a5ac9d64f54e99574c040ed70b427de4525f1b29741597457292504c5e
Size

52KB
MD5

f048bfc87312077380f882206303bbe8
SHA1

4c7c60036a928a7643de1366fb920c1d8e53d37e
SHA256

b94e30a5ac9d64f54e99574c040ed70b427de4525f1b29741597457292504c5e
SHA512

de5c821bc059418e26d5569a3c406e0c1a4bddc213a8f73c0846f1ce19b30ecb1e9dd4835cbd8cea3a581f31f3dee4c3f11e722d27fe28ce09e29d1cb89efeb8
SSDEEP

768:nKXtDdcbJul0LFD3BhPYNbXLnr2+ygLCXo9IWOmlS:KhEvLJ3BGN7Lnr2Rc+osmlS

Score

N/A

Malware Config

Signatures

Files

b94e30a5ac9d64f54e99574c040ed70b427de4525f1b29741597457292504c5e
.dll windows x86

5d8c58ec010b885342d1742362f77748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
VirtualFree
GetVersion
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateEventA
SetErrorMode
GetCommandLineA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
RtlUnwind

user32

GetForegroundWindow
GetSystemMetrics
wsprintfA

Exports

Exports

l_Abs
l_Advise
l_FreeMarshalStream
l_MarshalPtrInProc
l_ModuleGetClassObject
l_ModuleInit
l_ModuleRegisterClassObjects
l_Unadvise
l_UnmarshalPtr

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d8c58ec010b885342d1742362f77748

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 816B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 816B

.reloc
Size: 4KB - Virtual size: 1KB