dcb37ee427c6990aaee1f613ef0060193274c6239ab87eead6ab4e53522fc980

General

Target

dcb37ee427c6990aaee1f613ef0060193274c6239ab87eead6ab4e53522fc980
Size

136KB
MD5

59c51aa5dea001a8ba8b97ee6f28e7d0
SHA1

9ac8151c05c548b320a8e3d7e6f7e475d0f5ad14
SHA256

dcb37ee427c6990aaee1f613ef0060193274c6239ab87eead6ab4e53522fc980
SHA512

62dc9d9ea054943bbc48d7362a37f253d20e40b4ef912022492ddedd2a603534c3f9b29e629b4397d44c52837edc6f2940c39b5bea6836abd437c02715b81de3
SSDEEP

3072:ptv+UmqQCg6HmwEIMcUZzaKs3ac7v49GRtw:pUUnNk7s3N7v4gRtw

Score

N/A

Malware Config

Signatures

Files

dcb37ee427c6990aaee1f613ef0060193274c6239ab87eead6ab4e53522fc980
.dll windows x86

60c82b3fb9c83febc3af7131203a7c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation

version

VerQueryValueW

kernel32

RtlUnwind
GetStringTypeW
GetHandleInformation
LoadLibraryA
IsValidLocale
GetModuleHandleA
GetProcAddress
CreateProcessW
GetConsoleMode
SetErrorMode
MapViewOfFile
SetLastError
GetStringTypeA
SystemTimeToFileTime
HeapCreate
SetCurrentDirectoryW
GetStartupInfoA
SetFilePointer
LoadResource
WriteConsoleW
InterlockedExchange
InitializeCriticalSection
lstrcmpW
SetThreadPriority
VirtualAlloc
ExitProcess
GetSystemTime
HeapAlloc
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
VirtualFree
HeapFree
DeleteCriticalSection
FatalAppExitA
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
CloseHandle
CreateFileA
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
LCMapStringW

Exports

Exports

PGQUTYMM

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60c82b3fb9c83febc3af7131203a7c1f

Headers

File Characteristics

Imports

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 52KB - Virtual size: 53KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 52KB - Virtual size: 53KB

.reloc
Size: 12KB - Virtual size: 8KB