852179f644755fc37ff48b657b7f5bf2c39e3092fee79ffd605e1175be259c7e

General

Target

852179f644755fc37ff48b657b7f5bf2c39e3092fee79ffd605e1175be259c7e
Size

248KB
MD5

7622465d520b51fb584cb4f70afe8f98
SHA1

5d8691a0774dafca552d9d30c05127cecca1b2c5
SHA256

852179f644755fc37ff48b657b7f5bf2c39e3092fee79ffd605e1175be259c7e
SHA512

f9ba3b9486c256fdb46335d15a2e0154d3d6048c98c9e61a0ff2d4c29b667afed4e07747238f5e937e5084a5ed43219cf9dc5795fd6ae9f28bb3fff7a1e369cf
SSDEEP

6144:wOgxai/jRoFa4dq3cWw0oSv4UMNE78Wxwl315i:vi/jCXqVoShGy8RxC

Score

N/A

Malware Config

Signatures

Files

852179f644755fc37ff48b657b7f5bf2c39e3092fee79ffd605e1175be259c7e
.dll windows x86

24e7a0081e0c8a4848d85a5c400b6b0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
LoadLibraryA
GetProcAddress
ReadProcessMemory
GetCurrentProcessId
OpenFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetCurrentProcess
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

shlwapi

PathFileExistsW
StrStrIW

msvcr80

_malloc_crt
_encoded_null
_decode_pointer
_encode_pointer
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
??3@YAXPAX@Z
strcpy_s
free
wcscpy_s
malloc
strcat_s
_itoa
_CxxThrowException
__CxxFrameHandler3
_initterm
memset

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24e7a0081e0c8a4848d85a5c400b6b0a

Headers

File Characteristics

Imports

kernel32

shlwapi

msvcr80

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 578B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 578B