e7f80c8a6103fb6575122564721e9934638ee1fbf97a0f3b0717dd6ed6307267

Sharing

Copy URL Twitter E-mail

General

Target

e7f80c8a6103fb6575122564721e9934638ee1fbf97a0f3b0717dd6ed6307267
Size

552KB
MD5

5ebcdfe9fbd4271745ca43ae79a8e770
SHA1

d20e436be57de37ceff08211b0b4fc7cfacd9e21
SHA256

e7f80c8a6103fb6575122564721e9934638ee1fbf97a0f3b0717dd6ed6307267
SHA512

f31449861ce81d6d4429634d0477df61e03749f5edfaa0b7ba5dcd8fe047feab43cde464d4e2af3aaae70b292c5079e646fab3ade27577570eaf5793e32b26c4
SSDEEP

12288:H0K9C5+8NVR3hXohrPTJkRv+tSpbU4vkguuA:fIc8NLyJKto9g5A

Score

N/A

Malware Config

Signatures

Files

e7f80c8a6103fb6575122564721e9934638ee1fbf97a0f3b0717dd6ed6307267
.dll windows x86

7bc66de9bef29c25b0a2025f7575d0cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

ole32

CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr

kernel32

WaitForMultipleObjects
GlobalFree
GetCurrentProcessId
WaitForSingleObject
GetModuleHandleW
LoadResource
RaiseException
CreateFileW
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetDateFormatA
GetExitCodeThread
ReleaseMutex
CreateMutexW
lstrlenW
GlobalAlloc
InterlockedCompareExchange
InitializeCriticalSection
Sleep
CreateEventW
FreeLibrary
ResetEvent
LeaveCriticalSection
GetTickCount
VirtualAlloc
DeviceIoControl
CloseHandle
GetVersionExA
TerminateProcess
ReadFile
InterlockedExchange
QueryPerformanceCounter
EnterCriticalSection
GetCurrentThreadId
GetModuleHandleA
CreateWaitableTimerW
GetModuleFileNameW
MultiByteToWideChar
GetLastError
LocalFree
LocalAlloc
lstrcmpiW
DeleteCriticalSection
SetEvent
UnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement

Exports

Exports

ArithmeticError
BackslashReplaceErrors
Get
Merge
TabError
_Readline
free_data
get_y_offset_microns
warning

Sections

.text
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bc66de9bef29c25b0a2025f7575d0cc

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 153KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 152KB - Virtual size: 152KB

.rsrc Size: 160KB - Virtual size: 158KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 156KB - Virtual size: 153KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 152KB - Virtual size: 152KB

.rsrc
Size: 160KB - Virtual size: 158KB

.reloc
Size: 8KB - Virtual size: 7KB