72aeb9c628f26729e01a63324765116d9e2ee478a19a113702f46cd6ebf72230

General

Target

72aeb9c628f26729e01a63324765116d9e2ee478a19a113702f46cd6ebf72230
Size

134KB
MD5

dde08513a5ef20b165e7860a25cd9d58
SHA1

9435eeafc170894b21e523d39943a7099f261d0c
SHA256

72aeb9c628f26729e01a63324765116d9e2ee478a19a113702f46cd6ebf72230
SHA512

d2c5c1671ab8ec1c1fb97a303f80b0a6d4a334110a4323ecf1ab02249f27e5b36c16f5dbd2b550837c916373ead7ad194fe060d82eb84d91701aff74b5fd803f
SSDEEP

384:/LD+0AXcpsCTU5M9FTmcI3zmlHFLiqfyVRjdELQgNoUoXnv:/LSMpH6AFTmV+iAIELjiUoX

Score

N/A

Malware Config

Signatures

Files

72aeb9c628f26729e01a63324765116d9e2ee478a19a113702f46cd6ebf72230
.dll windows x86

1ace5bfef096bbfbd6636a03933eac6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
OutputDebugStringA
lstrcmpiA
VirtualProtect
VirtualQuery
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
DisableThreadLibraryCalls
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

SetWindowsHookExA
CallNextHookEx
FindWindowA
GetWindowThreadProcessId
UnhookWindowsHookEx

Exports

Exports

HookProc
InstallHook
RemoveHook

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HookSec
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ace5bfef096bbfbd6636a03933eac6b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.HookSec Size: 512B - Virtual size: 4B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.HookSec
Size: 512B - Virtual size: 4B

.reloc
Size: 1KB - Virtual size: 1KB