16d8e524a538b06035586cca21ec4c22bc0f347a3e056ef6aa615932698cdf8d

Sharing

Copy URL Twitter E-mail

General

Target

16d8e524a538b06035586cca21ec4c22bc0f347a3e056ef6aa615932698cdf8d
Size

141KB
MD5

4438d6bb63c8fa5faa8847aeba7b4f3b
SHA1

f70e202cfda02e74e5b21e6779fdfe0e33ce949e
SHA256

16d8e524a538b06035586cca21ec4c22bc0f347a3e056ef6aa615932698cdf8d
SHA512

12dcb7ee73e9e3c91e5786c33fdad4fa31e1ceb0da144ecb733c20425102e968f93b593702508407d9e78abf1e984de2d7226f2bdd7bf908b8d7aed027c8c3e9
SSDEEP

3072:QuyvWwa7jJEqxKk8/LlgVN35AwhBo+9Vxn8fyjDgHIQiMOcHo:QuyvCGqxKLC122Vxniy3gn4i

Score

N/A

Malware Config

Signatures

Files

16d8e524a538b06035586cca21ec4c22bc0f347a3e056ef6aa615932698cdf8d
.dll windows x86

78f5792346f8f78ef31c27c2642e1b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
TlsFree
GetACP
GetCPInfo
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
lstrcmpiA
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
LoadLibraryA
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
FlushFileBuffers
CloseHandle
SetStdHandle
GetLocaleInfoW

oleaut32

SysAllocStringByteLen
SysFreeString

crpe32

ord56
ord55
ord41
ord1010
ord1009
ord48
ord54
ord62
ord63
ord109
ord37
ord127
ord123
ord58
ord57
ord60
ord59
ord67

Exports

Exports

PEGetGraphOptions4
PEGetJobStatus4
PEGetNthTableSessionInfo4
PEGetNthTableType4
PELogOffServer4
PELogOnServer4
PESetGraphOptions4
PESetNthTableSessionInfo4
crPEDateToYearMonthDay
crPEExportToApp
crPEExportToDisk
crPEExportToExch
crPEExportToHTML
crPEExportToMapi
crPEExportToNotes
crPEExportToODBC
crPEExportToVIM
crPEGetGraphOptions
crPEGetNthParameterField
crPEGetNthParameterType
crPEGetNthTableLocation
crPEGetNthTableLogOnInfo
crPEGetNthTableSessionInfo
crPEGetSelectedPrinter
crPEHourMinuteSecondToTime
crPELogOffServer
crPELogOnServer
crPESelectPrinter
crPESetGraphOptions
crPESetNthParameterField
crPESetNthTableLocation
crPESetNthTableLogOnInfo
crPESetNthTableSessionInfo
crPEYearMonthDayToDate
crTimeToHourMinuteSecond
crvbHandleToBStr
crvbPEGetGraphOptions
crvbPEGetNthParameterField
crvbPEGetNthTableLocation
crvbPEGetNthTableLogOnInfo
crvbPEGetNthTableSessionInfo
crvbPEGetSelectedPrinter

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78f5792346f8f78ef31c27c2642e1b7d

Headers

File Characteristics

Imports

kernel32

oleaut32

crpe32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 90KB - Virtual size: 109KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 90KB - Virtual size: 109KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB