9966f2697b471de85420996774dc333a0c214802f47aaa397f963a30ffb05183

Sharing

Copy URL

Twitter E-mail

General

Target

9966f2697b471de85420996774dc333a0c214802f47aaa397f963a30ffb05183
Size

278KB
MD5

db19159e8e6b20ba6dfa9a2b7717fbd0
SHA1

a51f9d806b67333e1d29e6e46a620d1564d1bbe5
SHA256

9966f2697b471de85420996774dc333a0c214802f47aaa397f963a30ffb05183
SHA512

6d7d0076df9b12602799de7cf06470770faabe0323e66cd4cd7174e8df9a8525f4fb17e7c30435791ea721ccb67eecc0964f9bcd98461fc91826ca947a57372a
SSDEEP

3072:CDbbSetVGA86B91/W+bjcY3h3xrV0mxasoOHh6r:CDNXG/M91u+Tx3xrdasJB

Score

N/A

Malware Config

Signatures

Files

9966f2697b471de85420996774dc333a0c214802f47aaa397f963a30ffb05183
.dll windows x86

9ee4031203c6de3527bc2990b283d1c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
LocalFree
LockResource
OpenEventW
ReadFile
SetEvent
SetFilePointer
GlobalAlloc
TerminateProcess
UnhandledExceptionFilter
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
GetSystemTimeAsFileTime
GetTickCount
GetLastError
GetCurrentProcessId
FreeResource
FreeLibrary
FindResourceW
CreateProcessW
CreateEventW
CloseHandle
GetOEMCP
VirtualAlloc
GetProcessHeap
LocalAlloc
CreateFileA
SetUnhandledExceptionFilter
GetStartupInfoA

gdi32

GetStockObject

advapi32

RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegSetValueW

msvcrt

_wsplitpath
ctime
memmove
time
_vsnwprintf

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text13
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text12
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text11
Size: 512B - Virtual size: 199B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text10
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ee4031203c6de3527bc2990b283d1c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 21KB

.text13 Size: 512B - Virtual size: 199B

.text12 Size: 512B - Virtual size: 199B

.text11 Size: 512B - Virtual size: 199B

.text10 Size: 210KB - Virtual size: 209KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 21KB

.text13
Size: 512B - Virtual size: 199B

.text12
Size: 512B - Virtual size: 199B

.text11
Size: 512B - Virtual size: 199B

.text10
Size: 210KB - Virtual size: 209KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 1KB - Virtual size: 1KB