bc53f4ad0aa997bd5c3f71d54c5e016070ed00122df0050375093faff81bd7bc

Sharing

Copy URL Twitter E-mail

General

Target

bc53f4ad0aa997bd5c3f71d54c5e016070ed00122df0050375093faff81bd7bc
Size

112KB
MD5

b4a5f30b4065e52492e3f7ba438b5e3d
SHA1

85e5f04c07ee78601d4bd5eb4ed5e2ed0d838fee
SHA256

bc53f4ad0aa997bd5c3f71d54c5e016070ed00122df0050375093faff81bd7bc
SHA512

45b58a70d6f94ac449b6d86f813253d80bd82aa13fd9d688343339884b102abef1538e3989298fae0bdc5ccec1510e913483e9c9f2824c8739e52c81c790551e
SSDEEP

3072:18t8o20qy7EfcorOQqH4MdpvG8alo+Jh8HRrUT:1g20qyQZEdRG8sz

Score

N/A

Malware Config

Signatures

Files

bc53f4ad0aa997bd5c3f71d54c5e016070ed00122df0050375093faff81bd7bc
.dll windows x86

502921be5089c3521ecb182733b8cc86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetVersion
lstrlenW
lstrcatW
LocalAlloc
lstrcmpW
LoadLibraryW
GlobalLock
GlobalUnlock
LocalFree
FreeLibrary
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryA
InterlockedExchange
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
Sleep
InterlockedCompareExchange
VirtualProtect
GetModuleHandleA
GetFileAttributesW
GetProcAddress
GetCommandLineA
GetShortPathNameA
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RtlUnwind
VirtualQuery
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetSystemInfo

user32

EnableWindow
GetDlgItem
GetWindowLongW
SendMessageW
SetFocus
SetCursor
EnumDisplayDevicesW
SendDlgItemMessageW
RegisterClipboardFormatW
MessageBoxW
LoadStringW
SetWindowLongW
GetParent
ShowWindow
wsprintfW
IsDlgButtonChecked
WinHelpW
GetFocus

advapi32

RegCloseKey
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueExA

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CLSIDFromProgID
ReleaseStgMedium

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

502921be5089c3521ecb182733b8cc86

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 82KB - Virtual size: 81KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 39KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 82KB - Virtual size: 81KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 39KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 3KB