fb410958791a2884f2c92e519506fa6b020a7897aef07749741f317a2c28cadd

Sharing

Copy URL

Twitter E-mail

General

Target

fb410958791a2884f2c92e519506fa6b020a7897aef07749741f317a2c28cadd
Size

200KB
MD5

635373bd2733e0ef021ce54152d78250
SHA1

2dd4c4f15e8fb7cb3b790c0dc9d2585a11643b01
SHA256

fb410958791a2884f2c92e519506fa6b020a7897aef07749741f317a2c28cadd
SHA512

6721deaa49cc6a160f4bcedfeabcc3636c77b02aa5bab02dbbac65b92d5dd4aa51e3c31696f747678973a62d830cff296505904e392568ad81504106bf1166f4
SSDEEP

6144:0H6m1a3gWAFwrM6gfVrJG4hXoEkWWISjHlx:u6gjoyr3hXhtW/jFx

Score

N/A

Malware Config

Signatures

Files

fb410958791a2884f2c92e519506fa6b020a7897aef07749741f317a2c28cadd
.dll windows x86

3835c4c11637977287091b3ff9e6b5e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringW
CreateConsoleScreenBuffer
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
LCMapStringW
LocalAlloc
MultiByteToWideChar
OpenProcess
ResumeThread
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateThread
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
lstrlenA

user32

IsIconic
SetTimer
SystemParametersInfoA
EnumChildWindows
SetFocus
GetClientRect
DrawMenuBar
DispatchMessageA
DefWindowProcA
CheckMenuRadioItem

advapi32

ReadEventLogW
AddAuditAccessObjectAce
CryptCreateHash
RegQueryValueW
GetSecurityDescriptorDacl
QueryRecoveryAgentsOnEncryptedFile
LsaEnumerateAccounts
GetTrusteeNameA
BuildTrusteeWithSidW

ole32

CoCreateInstance
IsEqualGUID
CreateAntiMoniker
CoTaskMemFree
CoGetMalloc
CoCreateGuid
CoBuildVersion
CLSIDFromString

opengl32

glHint
glNormal3s

ddraw

DirectDrawCreate
DSoundHelp

Exports

Exports

ConvertToDCFeX2
EnumDevicePropertyReset
EnumExposureCompReset
EnumImageItemPropertyNext
EnumMCCustomCapRelease
EnumMCCustomCapReset
EnumRelCamSettingNext
EnumWBSettingReset
EstimateTrackSize
Free
GetImagePropBuffer
LogPosToNormalPos
Memcpy2DAsync
MemcpyToSymbol
SetDesiredUDFRevision

Sections

.text
Size: 133KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3835c4c11637977287091b3ff9e6b5e5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

opengl32

ddraw

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 212KB

.data Size: 60KB - Virtual size: 64KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 133KB - Virtual size: 212KB

.data
Size: 60KB - Virtual size: 64KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 1024B - Virtual size: 4KB