8581c6cf0f098dded02ebe30d43c6de3fa06b95cdd8a72674aae52efc29c7c90

Sharing

Copy URL Twitter E-mail

General

Target

8581c6cf0f098dded02ebe30d43c6de3fa06b95cdd8a72674aae52efc29c7c90
Size

364KB
MD5

f13df92d07dd432c71f72d986fe85c90
SHA1

911382c9a452bdcd66e6ae3d5367736517cf1017
SHA256

8581c6cf0f098dded02ebe30d43c6de3fa06b95cdd8a72674aae52efc29c7c90
SHA512

3896da88a58e54bfbe3fe602ab685ca04264daea058a75a3a4d5f1aaf5d0c5090b58a981f61931a3140ec90280b0aac942aab7976711c3fefa6658db0acfe894
SSDEEP

6144:QvrDa8lXKhAQbdqdVmRC+KpjqwSavjfPP+2mGuvIGeJc9y32BRKP5GLfy3Cw1jcU:cDtUhHqdVN+KjSmj322XjCHjKPuayw1R

Score

N/A

Malware Config

Signatures

Files

8581c6cf0f098dded02ebe30d43c6de3fa06b95cdd8a72674aae52efc29c7c90
.dll windows x86

47eaf647416bd4d35d7eb19b51b40798

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

LoadTypeLi
SysFreeString
UnRegisterTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
VarUI4FromStr

shell32

ShellExecuteW

advapi32

RegEnumKeyExW
RegCloseKey
RegQueryValueExW
CryptGetKeyParam
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

ole32

CoTaskMemAlloc
CoInitialize
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoCreateInstance

kernel32

InterlockedExchange
LeaveCriticalSection
DeviceIoControl
GetDateFormatA
CloseHandle
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
LocalAlloc
ReadFile
FreeLibrary
VirtualAlloc
GetTickCount
SetEvent
InterlockedCompareExchange
LoadResource
SetUnhandledExceptionFilter
WideCharToMultiByte
CreateMutexW
QueryPerformanceCounter
lstrcmpiW
GetVersionExA
GlobalAlloc
MultiByteToWideChar
CreateFileW
UnhandledExceptionFilter
Sleep
DeleteCriticalSection
GetModuleHandleA
LocalFree
GlobalFree
RaiseException
InterlockedIncrement
WaitForSingleObject
lstrlenW
GetModuleFileNameW
InterlockedDecrement
GetLastError
TerminateProcess
GetCurrentProcessId
GetModuleHandleW
InitializeCriticalSection

Exports

Exports

CallFunction5
GetLocals
Items
get_hIST
reset_zstream
set_crc_action

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47eaf647416bd4d35d7eb19b51b40798

Headers

File Characteristics

Imports

oleaut32

shell32

advapi32

ole32

kernel32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 52KB - Virtual size: 52KB

.rsrc Size: 60KB - Virtual size: 58KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 60KB - Virtual size: 58KB

.reloc
Size: 8KB - Virtual size: 7KB