b55133e5d1095a5533158e9518ce9daaf746a61411492c19087b96084d4be5b2

Sharing

Copy URL Twitter E-mail

General

Target

b55133e5d1095a5533158e9518ce9daaf746a61411492c19087b96084d4be5b2
Size

260KB
MD5

af1e4d9ef3b2ae6c74fda18580d19bbf
SHA1

17a3a1659eb6cdb7ac40ab7433db53d2d3a2597b
SHA256

b55133e5d1095a5533158e9518ce9daaf746a61411492c19087b96084d4be5b2
SHA512

b28d0febb5b452c22c886d270f893ad553cfc6a2261140488abd9801c98b90c4f1851eeb2ab897b1bcaef18aeb09f346269015b035615ad31671878c815897a3
SSDEEP

6144:rSFFowfYAl3N9M9teqZyZxZOMjDlQhCjX5PjLdXy:rSFL3KzeDx13lQ8lPjLdC

Score

N/A

Malware Config

Signatures

Files

b55133e5d1095a5533158e9518ce9daaf746a61411492c19087b96084d4be5b2
.dll windows x86

ee0e6cf262f7b4800fef064f28d4c6f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetLastError
ExpandEnvironmentStringsW
GetFileAttributesW
InitializeCriticalSection
GetLogicalDriveStringsW
MultiByteToWideChar
RaiseException
GetLocaleInfoA
GetACP
GetDriveTypeW
InterlockedExchange
CloseHandle
ReadFile
FlushFileBuffers
SetStdHandle
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualQuery
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
SetFilePointer
GetStringTypeA
GetStringTypeW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW

Exports

Exports

CoDeviceInstall

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee0e6cf262f7b4800fef064f28d4c6f9

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 176KB - Virtual size: 178KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 176KB - Virtual size: 178KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 8KB - Virtual size: 6KB