a0241d5671404b7bd550bee44a941c6f36554c42ea05386b715ea7efe368fa79

General

Target

a0241d5671404b7bd550bee44a941c6f36554c42ea05386b715ea7efe368fa79
Size

11KB
MD5

25094cdd1a6e11abc4898009d3fbddc0
SHA1

f9fa20b5aeba559e8407b086a318bb332cea6ad2
SHA256

a0241d5671404b7bd550bee44a941c6f36554c42ea05386b715ea7efe368fa79
SHA512

3bc5dabc58dac04c347f3bdaac5ddb1dfcbb0c6165d9322247bead052413b3badc617dbba81dc9ae3cfdf09d542c17463f4861abb9177e89cf5c336c3add0145
SSDEEP

192:cXCQ5Xj3RKgxDGMThuQ018zwuxWGIK/RXbN9WN74BM:6CQhEgkMob8zLNIK/RXbN9W52M

Score

N/A

Malware Config

Signatures

Files

a0241d5671404b7bd550bee44a941c6f36554c42ea05386b715ea7efe368fa79
.dll windows x86

470dd4824c3d754606f96317286975e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
FileTimeToSystemTime
GetComputerNameA
GetCurrentProcess
GetCurrentProcessId
GetFileAttributesA
GetFileTime
GetModuleFileNameA
GetModuleHandleA
EnumResourceTypesA
GetWindowsDirectoryA
LoadLibraryA
Sleep
SystemTimeToTzSpecificLocalTime
Thread32First
Thread32Next
VirtualAlloc
VirtualProtect
DeviceIoControl
DisableThreadLibraryCalls
DeleteFileA
CreateToolhelp32Snapshot
CreateThread
CreateFileA
GetProcAddress
CloseHandle

user32

SendDlgItemMessageA
MessageBoxA
GetWindowTextA
GetDlgItem
GetDC
GetClassNameA
EnumThreadWindows
GetDlgItemTextA
SendMessageA

advapi32

GetCurrentHwProfileA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA

gdi32

GetPixel

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

470dd4824c3d754606f96317286975e4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

shell32

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 1024B - Virtual size: 812B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 1024B - Virtual size: 812B