636a9e4c393acd924948009cec0893cae09959e3d6b8daf0b08cb23d967b5769

General

Target

636a9e4c393acd924948009cec0893cae09959e3d6b8daf0b08cb23d967b5769
Size

44KB
MD5

7c6b19690061f1f357c1e7fdd52a8190
SHA1

582cecb40f2c282df99b217ed6627e7bb03f6c02
SHA256

636a9e4c393acd924948009cec0893cae09959e3d6b8daf0b08cb23d967b5769
SHA512

eadeb942b4010a3e467cab6e72560039e29f2ef632feb68ae23192ea6e60c89dd59a3257fcc3b5e4fd3695993c01fcfa7649e2df9135dcbbb7030491cb3a683b
SSDEEP

768:ORbar8G3LwpRl+I6xQ6LME4/kBzFZ/Q9CGONaMAvP:+b8b3Le/2xn1CkBzs9xKaJ

Score

N/A

Malware Config

Signatures

Files

636a9e4c393acd924948009cec0893cae09959e3d6b8daf0b08cb23d967b5769
.dll windows x86

cce9ee989d2eda8681caf0f53c389430

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetLastError
CreateMutexA
SetLastError
CloseHandle
WaitForSingleObject
CreateEventA
SetEvent
GetVolumeInformationA

user32

UnhookWindowsHookEx
SetWindowsHookExA
GetWindowLongA
CallNextHookEx

msvcrt

strncpy
??2@YAPAXI@Z
__CxxFrameHandler
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
_CxxThrowException
??1exception@@UAE@XZ
_adjust_fdiv
memcpy
strlen
memset
sprintf
strchr
memmove
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc

Exports

Exports

set_create_window_hook
unset_create_window_hook

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cce9ee989d2eda8681caf0f53c389430

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 4KB

Shared Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.pdata Size: - Virtual size: 52KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 4KB

Shared
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB

.pdata
Size: - Virtual size: 52KB