85c1f019cc3b369d5b4ac32bc664c064e73061b06941393120149ec59ed9d11a

Sharing

Copy URL Twitter E-mail

General

Target

85c1f019cc3b369d5b4ac32bc664c064e73061b06941393120149ec59ed9d11a
Size

612KB
MD5

9ab3f8a7f67ef58f464d5c88dc900d60
SHA1

4712cc1960142e11eb0a78a49b2286428b3134a2
SHA256

85c1f019cc3b369d5b4ac32bc664c064e73061b06941393120149ec59ed9d11a
SHA512

1f82789484e49f085fe6390e4721a2aac298632a81b21b8017dc495e7e6f264ca4ebdf3967f7b712ab958ffef491438a824f88dade567eeb69cd8a11fbbc0ca0
SSDEEP

12288:3hyRYJKd4Kml7ktuu0tsxyRBYMyQ+pcSddeL/AmkRLjcJmI+d:3hyRwk4ll7kg/hRB1apheL/ARLIJr+d

Score

N/A

Malware Config

Signatures

Files

85c1f019cc3b369d5b4ac32bc664c064e73061b06941393120149ec59ed9d11a
.dll windows x86

da4d5c887ed7172b9a5089a2fc0a3850

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoUninitialize
CoTaskMemRealloc
CoInitialize
CoInitializeEx
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocString
SysStringLen
LoadTypeLi
VarUI4FromStr
SysFreeString
UnRegisterTypeLi
RegisterTypeLi

shell32

ShellExecuteW

kernel32

RaiseException
GlobalFree
GetCurrentProcessId
LeaveCriticalSection
InterlockedDecrement
UnhandledExceptionFilter
FreeLibrary
WaitForSingleObject
VirtualAlloc
DeleteCriticalSection
Sleep
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
InitializeCriticalSection
CloseHandle
LocalFree
GetModuleFileNameW
GlobalAlloc
SetUnhandledExceptionFilter
CreateMutexW
QueryPerformanceCounter
lstrcmpiW
GetModuleHandleW
GetDateFormatA
ReadFile
InterlockedIncrement
CreateFileW
GetModuleHandleA
LoadResource
GetVersionExA
DeviceIoControl
MultiByteToWideChar
TerminateProcess
GetLastError
InterlockedExchange
WideCharToMultiByte
EnterCriticalSection
lstrlenW
LocalAlloc
InterlockedCompareExchange
SetEvent

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

CallObject
FromNode
IsSubclass
PendingDeprecationWarning
SetAttr
StreamWriter
_Fini
get_x_pixels_per_meter
set_packing

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da4d5c887ed7172b9a5089a2fc0a3850

Headers

File Characteristics

Imports

ole32

oleaut32

shell32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 140KB - Virtual size: 140KB

.rsrc Size: 160KB - Virtual size: 157KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 140KB - Virtual size: 140KB

.rsrc
Size: 160KB - Virtual size: 157KB

.reloc
Size: 8KB - Virtual size: 7KB