9fb5c3da818b4501a76952517bf2d93929376ec87948da14b13ff82f2c752c4b

Sharing

Copy URL Twitter E-mail

General

Target

9fb5c3da818b4501a76952517bf2d93929376ec87948da14b13ff82f2c752c4b
Size

88KB
MD5

1b93e52bbcae49232d28dd67cbf61477
SHA1

91520788424b4adcb2d4e321908bc94fea508845
SHA256

9fb5c3da818b4501a76952517bf2d93929376ec87948da14b13ff82f2c752c4b
SHA512

d858058a18003a0416df2bd1c05852e2b7add43c9d940316e4e477397d779b3da2b3774334a9018c3c2e13e0734bdd9c2c1ff803b81a6cefe7fc8e6c9eb74f5e
SSDEEP

1536:oDPu/Ipl66EaOxQD6lvnEQfL1k435yv/NT48hEdY5waIxQc4Z/OnkxSkXM8Lzdj4:YK8fE5lvnnTpyv/x48WdYuaIxdCmnkxq

Score

N/A

Malware Config

Signatures

Files

9fb5c3da818b4501a76952517bf2d93929376ec87948da14b13ff82f2c752c4b
.dll windows x86

5ddc763dcce1619c2a7a08e3c937d07c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
ResumeThread
FindResourceW
LoadResource
LockResource
GetLocaleInfoW
GetNumberFormatW
SetEvent
CreateEventW
GetExitCodeThread
lstrcpyW
WaitForSingleObject
CreateThread
lstrcmpW
IsBadStringPtrW
GetTickCount
FormatMessageW
lstrlenW
LocalAlloc
LoadLibraryW
FreeLibraryAndExitThread
InterlockedDecrement
lstrcmpiW
GetLastError
ReleaseMutex
DeleteCriticalSection
LocalFree
lstrcpynW
FreeLibrary
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
WideCharToMultiByte
GetVersionExA
CreateEventA
OutputDebugStringA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesW
GetDriveTypeW
lstrcatW
GetVolumePathNameW
GetVolumeInformationW
GlobalFree
GetCommandLineA
VirtualProtect
CloseHandle
GlobalAlloc

user32

IsWindow
GetAsyncKeyState
CharUpperW
CharNextW
GetDialogBaseUnits
GetWindowRect
IsWindowEnabled
LoadStringW
IsDlgButtonChecked
GetDlgItemInt
GetDlgCtrlID
WinHelpW
GetParent
SetWindowLongW
RemovePropW
GetDlgItem
EnableWindow
SendMessageW
FindWindowW
PostMessageW
DestroyMenu
SetDlgItemInt
SetPropW
GetWindowLongW
wsprintfW
EndDialog
CheckDlgButton
GetFocus
GetNextDlgTabItem
SetFocus
SetWindowTextW
SetTimer
GetCaretBlinkTime
PeekMessageW
SetDlgItemTextW
CheckRadioButton
SendDlgItemMessageW
LoadImageW
MessageBoxW
LoadIconW
DestroyWindow
GetDesktopWindow
KillTimer
MsgWaitForMultipleObjectsEx
UnregisterClassW

advapi32

DeregisterEventSource
RegOpenCurrentUser
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
ImpersonateLoggedOnUser
RevertToSelf
RegCreateKeyExW
RegisterEventSourceW
ReportEventW
RegCloseKey

ole32

CoUninitialize
CoTaskMemAlloc

msvcr71

_except_handler3
_CxxThrowException
memcpy
_amsg_exit
_initterm
free
__dllonexit
_adjust_fdiv
_XcptFilter
memset
malloc
__CppXcptFilter
_onexit

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ddc763dcce1619c2a7a08e3c937d07c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

msvcr71

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB