c99ef5f6e3d7f3d1d69aab8384636e91932532cd6fe5f6519e1a084fbee5bea6

General

Target

c99ef5f6e3d7f3d1d69aab8384636e91932532cd6fe5f6519e1a084fbee5bea6
Size

127KB
MD5

3f355e121f107536942d9fee6825e9f3
SHA1

bc7a302203ec2145e0360b9b33b176214e77ed13
SHA256

c99ef5f6e3d7f3d1d69aab8384636e91932532cd6fe5f6519e1a084fbee5bea6
SHA512

da4ddd983ccbd578e930b009904d4338bf5ccd9a5b188aeb37b5e1e1f4e78ce5f556901181a3a76c2424f0bb3ecd434cccb711ea30ba7bdb4506cac8e26f85ea
SSDEEP

3072:lcg1l8nyU+jHgEUfJ458M8BBM3/4fVeVtk0mCFz9hJHky0KMMiU1m9:ugYyHH9Y0QNeVt1mCFz9bky0KNP

Score

N/A

Malware Config

Signatures

Files

c99ef5f6e3d7f3d1d69aab8384636e91932532cd6fe5f6519e1a084fbee5bea6
.dll windows x86

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus

ole32

WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject

user32

SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups

shell32

SHGetFileInfoA
SHBindToParent
SHFileOperationA

shlwapi

PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA

msvcrt

time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf

kernel32

TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile

Exports

Exports

Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 28KB

.rdata Size: 34KB - Virtual size: 36KB

.data Size: 32KB - Virtual size: 36KB

.idata Size: 10KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 25KB - Virtual size: 28KB

.rdata
Size: 34KB - Virtual size: 36KB

.data
Size: 32KB - Virtual size: 36KB

.idata
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 28KB