5b5538d2a1339b4d26e3330529b5082e01cd04289662d7c277890ed587140e3c

Sharing

Copy URL Twitter E-mail

General

Target

5b5538d2a1339b4d26e3330529b5082e01cd04289662d7c277890ed587140e3c
Size

348KB
MD5

888ec082d594f436505ac6bc40219c00
SHA1

c6ab71204f5219be42d8764868c02c5fbd47a19d
SHA256

5b5538d2a1339b4d26e3330529b5082e01cd04289662d7c277890ed587140e3c
SHA512

43e26f46c45641d33cf833198841aa92465d27a3d5d9648439a2b5317fa96ce7d691d621047b56eafd5a6c8479ce7ad53d31c62ed9ba1e048147331b0d58410f
SSDEEP

6144:3UaAPskkyKyRJnSVEY1pJ7BqZfJoAIWtecBrbn/M8rPw00:EaOTk8RJSVEepVuBcWMk/MGO

Score

N/A

Malware Config

Signatures

Files

5b5538d2a1339b4d26e3330529b5082e01cd04289662d7c277890ed587140e3c
.dll windows x86

36ffffdf1c8019226d60e56771e97d06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi
SysFreeString
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
RegisterTypeLi
SysAllocString

shell32

ShellExecuteW

kernel32

GetModuleHandleW
GetModuleHandleA
SetEvent
GlobalFree
GlobalAlloc
ReadFile
Sleep
MultiByteToWideChar
CreateMutexW
LocalAlloc
LeaveCriticalSection
RaiseException
UnhandledExceptionFilter
InterlockedIncrement
WaitForSingleObject
InterlockedExchange
GetTickCount
TerminateProcess
GetVersionExA
GetThreadLocale
CloseHandle
VirtualAlloc
GetCurrentProcessId
lstrcmpiW
FreeLibrary
lstrlenW
WideCharToMultiByte
CreateFileW
DeviceIoControl
CreateEventW
InitializeCriticalSection
LoadResource
GetCurrentThreadId
QueryPerformanceCounter
GetLastError
InterlockedCompareExchange
EnterCriticalSection
SetUnhandledExceptionFilter
LocalFree
GetSystemTimeAsFileTime
InterlockedDecrement
GetDateFormatA
GetModuleFileNameW
DeleteCriticalSection

advapi32

SetThreadToken
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemRealloc
CoTaskMemAlloc

Exports

Exports

Addr2Line
GetItemString
Module_GetDict
UserWarning
set_strip_error_numbers

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36ffffdf1c8019226d60e56771e97d06

Headers

File Characteristics

Imports

oleaut32

shell32

kernel32

advapi32

ole32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 158KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 60KB - Virtual size: 58KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 160KB - Virtual size: 158KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 60KB - Virtual size: 58KB

.reloc
Size: 8KB - Virtual size: 7KB