ff52c5957fd64f98411916c25dbd68b812ecd06e0e6e3b09c2790eafac7ba69a

Sharing

Copy URL

Twitter E-mail

General

Target

ff52c5957fd64f98411916c25dbd68b812ecd06e0e6e3b09c2790eafac7ba69a
Size

376KB
MD5

0e4b92fd447b1acc180f910e81149210
SHA1

e82d3bb3c8b4f7ea68d479e4d3a7e9d72a700fd9
SHA256

ff52c5957fd64f98411916c25dbd68b812ecd06e0e6e3b09c2790eafac7ba69a
SHA512

00129dab9a9babc9517fb86f74a3a3c60624cdc541a7cb64463344fcd534dceb721b62048d52555afce71a87e1e599792da37e547ef716c6fb842b8ab99c7ba4
SSDEEP

6144:7tps9x8JexbAAaMTlusod2fH0sfZTbH596UP5IXI2GcmOopV3NiK6NV:7tpQPBTlPoARTbHzbqtGclqV8

Score

N/A

Malware Config

Signatures

Files

ff52c5957fd64f98411916c25dbd68b812ecd06e0e6e3b09c2790eafac7ba69a
.dll windows x86

48e65bf3055d9e49d8c00f45057795d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
InitializeCriticalSection
VirtualAlloc
LeaveCriticalSection
InterlockedDecrement
RaiseException
GetModuleFileNameW
GetTickCount
CreateMutexW
GetSystemTimeAsFileTime
InterlockedIncrement
LocalFree
lstrlenW
FreeLibrary
EnterCriticalSection
Sleep
GetVersionExA
InterlockedCompareExchange
GetDateFormatA
QueryPerformanceCounter
GetLastError
LocalAlloc
GetThreadLocale
TerminateProcess
WideCharToMultiByte
CloseHandle
GlobalFree
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
LoadResource
GlobalAlloc
CreateEventW
InterlockedExchange
UnhandledExceptionFilter
WaitForSingleObject
SetUnhandledExceptionFilter
GetModuleHandleA
SetEvent
ReadFile
DeviceIoControl
CreateFileW
MultiByteToWideChar
DeleteCriticalSection

oleaut32

SysFreeString
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
LoadTypeLi
RegisterTypeLi
SysAllocString

advapi32

RegQueryValueExW
RegOpenUserClassesRoot
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegCloseKey
CryptGetKeyParam

shell32

ShellExecuteW

ole32

CoTaskMemAlloc
CoUninitialize
CoTaskMemRealloc
CoInitializeEx
CoCreateInstance
CoInitialize

Exports

Exports

GetBuiltins
GetMin
Instance_New
_SetSlice
read_png

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48e65bf3055d9e49d8c00f45057795d1

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 72KB - Virtual size: 69KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 64KB - Virtual size: 61KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 72KB - Virtual size: 69KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 64KB - Virtual size: 61KB

.reloc
Size: 8KB - Virtual size: 7KB