922e200c5ed17088558fa77b6f65c7436b334333f5a472632fad91e49fcf263b

Sharing

Copy URL Twitter E-mail

General

Target

922e200c5ed17088558fa77b6f65c7436b334333f5a472632fad91e49fcf263b
Size

92KB
MD5

63fa27284a34802a906eb5ba35c96204
SHA1

5e641f52e7f3de3d2b10419a850c3b72ba125efa
SHA256

922e200c5ed17088558fa77b6f65c7436b334333f5a472632fad91e49fcf263b
SHA512

6b629600cc6121b567c3c27ea37109c927d178ed2491a1bca2c9e1eda6fc76ab5dac549dc6b043ac4ddd03a551db712faacfb6d3dd2aa904382ed3fbd7653156
SSDEEP

1536:EJHjf0Rkih8ucEUQy8uIXqugg1Gq652cC9qK3OdpGeOAcT3YmddK8YyHJkRCU6iT:EJHjfCcdQyn6qugg1GB2yK3OdcePgYmK

Score

N/A

Malware Config

Signatures

Files

922e200c5ed17088558fa77b6f65c7436b334333f5a472632fad91e49fcf263b
.dll windows x86

584ef854cd6604a9b4427620661db501

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LocalFree
LocalAlloc
GetProcessHeap
GetProcAddress
FreeLibrary
GetVersion
ResetEvent
SetEvent
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
Sleep
InterlockedExchange
WriteFile
SetFilePointer
lstrlenA
lstrcpyW
lstrcmpiW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CloseHandle
HeapAlloc
lstrlenW
HeapFree
CompareStringW
GetPrivateProfileStringA
MultiByteToWideChar
HeapReAlloc
DisableThreadLibraryCalls
InterlockedCompareExchange
VirtualProtect

user32

ShowWindow
GetClientRect
DestroyWindow
GetWindowRect
GetScrollInfo
SetWindowPos
EnableWindow
EndDialog
GetDC
ReleaseDC
GetParent
SetScrollRange

gdi32

DeleteObject
SelectObject
GetStockObject

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc

rpcrt4

NdrDllUnregisterProxy

msvcrt

_XcptFilter
_adjust_fdiv
_amsg_exit
free
iswxdigit
_CxxThrowException
wcslen
wcscat
wcscpy
malloc
_wcsicmp
iswspace
wcscmp
_wcsnicmp
wcsncpy
_initterm
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
time
_except_handler3

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

584ef854cd6604a9b4427620661db501

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

rpcrt4

msvcrt

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 35KB - Virtual size: 68KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 35KB - Virtual size: 68KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 2KB