fc30275f56d13a0125b5234bf3152439d6da48154d33aad544801de7182b27d1

Sharing

Copy URL Twitter E-mail

General

Target

fc30275f56d13a0125b5234bf3152439d6da48154d33aad544801de7182b27d1
Size

580KB
MD5

efd30f00093f99b17dc46478d8d01300
SHA1

f843b5f6bb139dc991137db0e30ee39ec5e2e6c3
SHA256

fc30275f56d13a0125b5234bf3152439d6da48154d33aad544801de7182b27d1
SHA512

f67eda6d5e3386f40b4e438e98c0266c9307b5744ec6ed97b5a2564269d1fee8e3db41a4718f336f08e37f3b9d8a232fa764ca14e182bedbff6e259a2d6fdf49
SSDEEP

6144:5QpcrPiYhtUGo5NIkgBANLVn+u+ZLdCWPArb4GPUiqpRAkS7Jh9WrRF5BecMIW/3:5QWrJC3hIL1Yb4UCc9n/MQfRla4KxFg

Score

N/A

Malware Config

Signatures

Files

fc30275f56d13a0125b5234bf3152439d6da48154d33aad544801de7182b27d1
.dll windows x86

9f620bb6a78791a6b58e1e82abbffe12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetDateFormatA
GlobalFree
lstrlenW
lstrcmpiW
LocalAlloc
InterlockedCompareExchange
CloseHandle
InterlockedIncrement
FreeLibrary
VirtualAlloc
ReleaseMutex
MultiByteToWideChar
GetModuleHandleW
WaitForSingleObject
InterlockedDecrement
GetTickCount
GetVersionExA
GetModuleHandleA
GlobalAlloc
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
InterlockedExchange
WideCharToMultiByte
CreateEventW
SetEvent
GetLastError
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentThreadId
LoadResource
LocalFree
ReadFile
CreateWaitableTimerW
DeleteCriticalSection
TerminateProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
GetThreadLocale
ResetEvent
WaitForMultipleObjects
EnterCriticalSection
GetExitCodeThread
CreateFileW
QueryPerformanceCounter
DeviceIoControl
CreateMutexW
RaiseException

ole32

CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoInitializeEx

advapi32

RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey

oleaut32

SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
VarUI4FromStr

Exports

Exports

GetBuiltins
GetMin
Instance_New
_SetSlice
read_png

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f620bb6a78791a6b58e1e82abbffe12

Headers

File Characteristics

Imports

kernel32

ole32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 152KB - Virtual size: 152KB

.rsrc Size: 156KB - Virtual size: 155KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 152KB - Virtual size: 152KB

.rsrc
Size: 156KB - Virtual size: 155KB

.reloc
Size: 12KB - Virtual size: 8KB