8e8ea445e953d65120faaebb720e365fc3b138208c6132c9148fffa3a68de6fc

Sharing

Copy URL Twitter E-mail

General

Target

8e8ea445e953d65120faaebb720e365fc3b138208c6132c9148fffa3a68de6fc
Size

20KB
MD5

03f8fa39eac0acbd9c3d35e967125c72
SHA1

c3ecea04a192d5e02aefa08f31d822c1a76c991c
SHA256

8e8ea445e953d65120faaebb720e365fc3b138208c6132c9148fffa3a68de6fc
SHA512

1c7871d06cc32068703d44ef8fab2f3b50a46b97d2c7036b2395ca66762392f61f8f739f94535d98316281e907d7d8db971d827de93d28b5d1f168355ea223ce
SSDEEP

384:w8cawklXNOnAiFaHEBp5DWK9ytlGv+vwCgjL9khTJi:wbFkloXZBp5DWKytOCgjLahTJ

Score

N/A

Malware Config

Signatures

Files

8e8ea445e953d65120faaebb720e365fc3b138208c6132c9148fffa3a68de6fc
.dll windows x86

9543c6dd210b1910b11051a9963a983b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
VirtualFree
GetProcAddress
SearchPathA
GetSystemTimeAsFileTime
FindFirstFileExW
VirtualAlloc
ReplaceFileA
GetFileSize
GetFileSize
LoadResource
HeapAlloc
EnumResourceNamesA
GetTempPathA
GetEnvironmentVariableA
VirtualProtect
GetCurrentProcess
SetEnvironmentVariableW
FreeEnvironmentStringsA
GetDriveTypeA
SystemTimeToTzSpecificLocalTime
FreeLibrary
OpenEventA
LoadLibraryA

msvcrt

_splitpath
_wtoi
_mbsncoll
_wcsrev
setlocale
memcpy
_mbccpy
_ismbslead
_gcvt
wctomb
_CIsinh
wcscat
iswcntrl
__p__winmajor
__p___wargv
_get_osfhandle
ferror
abs

comdlg32

LoadAlterBitmap
GetFileTitleW
FindTextW
ReplaceTextW
GetSaveFileNameW
ChooseFontW
GetOpenFileNameW
ChooseFontA
FindTextA
LoadAlterBitmap
dwLBSubclass
PageSetupDlgW
PrintDlgExW
GetSaveFileNameA
GetOpenFileNameA
dwOKSubclass
PrintDlgA
Ssync_ANSI_UNICODE_Struct_For_WOW

winmm

waveInGetID
PlaySound
WOW32ResolveMultiMediaHandle
midiInUnprepareHeader
mixerMessage
aux32Message
mciDriverYield

opengl32

glRotatef
glGenTextures
glRasterPos2d
glEvalCoord1dv
glIndexPointer
glRenderMode

Exports

Exports

MolKqjwWk
RgTetfirlBnlnqmf

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9543c6dd210b1910b11051a9963a983b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

opengl32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 54B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 54B