e25f63613ee58b9af7912030a9666a39bd4c012adfd87baab6da6d88f3c3456e

Sharing

Copy URL

Twitter E-mail

General

Target

e25f63613ee58b9af7912030a9666a39bd4c012adfd87baab6da6d88f3c3456e
Size

1016KB
MD5

4b5965407a92d7c1653ca9ebaf141895
SHA1

b637985952e53ad80cc4fa633948e5ec37e5942e
SHA256

e25f63613ee58b9af7912030a9666a39bd4c012adfd87baab6da6d88f3c3456e
SHA512

d8da0b3c8aeebd5771a66f54c42a4f79da8a831983b4eb1652e9d5c15fbc053a537b853397481c714a10d97b35170a7e906b3f1726694d65f765fc28fba62148
SSDEEP

6144:MxEp4XDJWzbRh0ScU+nBS6VEfuOCQ895jcM1:M+tzbRaSQSX3S95R

Score

N/A

Malware Config

Signatures

Files

e25f63613ee58b9af7912030a9666a39bd4c012adfd87baab6da6d88f3c3456e
.dll windows x86

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
lstrcpyA
ResetEvent
ExitThread
GetStringTypeA
WriteFile
GetFileAttributesA
SetEndOfFile
lstrlenW
SetFilePointer
SetHandleCount
FreeLibrary
lstrlenA
InitializeCriticalSection
SetErrorMode
GetTempPathA
LocalFree
GlobalFindAtomA
RaiseException
MoveFileExA
GetModuleHandleA
GetEnvironmentStrings
GetCurrentProcessId
GetDiskFreeSpaceA
FindFirstFileA
FreeResource
LocalReAlloc
IsBadHugeReadPtr
GetStartupInfoA
HeapDestroy
lstrcpynA
GetDateFormatA
GetVersion
GetCurrentThread
GlobalAddAtomA
SetThreadLocale
GetCommandLineA
EnterCriticalSection
GetLocaleInfoA
GlobalDeleteAtom
IsBadReadPtr
VirtualAlloc
SetLastError
GetProcessHeap
GetModuleHandleW
GetCommandLineW
FindClose
GetCurrentThreadId
LoadLibraryA
GetStdHandle
MulDiv
VirtualFree
CreateEventA
ExitProcess

user32

GetWindow
GetFocus
FrameRect
IsWindowUnicode
GetMenu
EnumWindows
FindWindowA
GetActiveWindow

comctl32

ImageList_Draw
ImageList_Add
ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read

advapi32

RegOpenKeyA
RegEnumKeyA
RegQueryInfoKeyA

Exports

Exports

dfDtRd7VX0i7@24
XEHXr
_24GdBbOVM@8
emmtcJ_yO1Cnk
dxQoqSA@20
dF9YG@16
_cvWeKH@24
yzOgagWHt@4
m4fr2shCZlDD@8
_Ax6oI9AS@24
_2odhZ
Httlcbo
T_MhNNDZju84C
1SF5FXHRIQBQ3W@8
_LNvinOh9l0
XYvUet
7P2JAtGzsXIAc
Ynd57s
lSILxIyYGq7D@8
2qXe2A2o@16
fsIFUjMD
_wxEN41wehP1D
J5llFNtGSSZLRS@20
nrWPP5bhoM
_2x2Fha1iIZtJ@8
jdBWDemJo
slV3x@8
VcWZqX@24
UuU5Iq@12
_rWcxOJeBK8C
_lJ1vY
_EzOxcBCq
wkVvIEDg2BD1f4
_CX2S@20
ekkTpyM
_ewjZ8ru@12
Y0dACTNOfauc
_fg4vn5qa
_wsBc1lzg@4
_t1B0rNHTCV4@24
fb0JJZfpz
5Cop6U7@16
yTWVO@20
_I69unGmirA88
z3KK8f@8
_QYUr4qz
_TDzeTF0u0
bVDXn36zbM4Fib
_A1yx1z@12
_lKoVWzfal@24
qOitv
_OJpFDczHwf
Cjmd5WIrnd8UH@8
u7I8q
4hhoPzNHz
jabkYl6fu@4
_L_LL_wWhCVi
MF0ESYI@4
_z1jwX2TnO7HbH9@24
_IRLMTIZ9@4
_m8Dc7LPOUKl@4
DVLj7O
R4zXlgH26fg
_FELGDKM5tb
MyzYboX
_h7UEcxwda0_PO0

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 790KB - Virtual size: 789KB

.kudata Size: 173KB - Virtual size: 173KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 6KB - Virtual size: 5KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 790KB - Virtual size: 789KB

.kudata
Size: 173KB - Virtual size: 173KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 6KB - Virtual size: 5KB