7996a4c34b67d95a09a82014a601c51bcbf9de8d5d5aca6e3893619fb38ca7da

General

Target

7996a4c34b67d95a09a82014a601c51bcbf9de8d5d5aca6e3893619fb38ca7da
Size

416KB
MD5

16c4ef482f4c9778c65f6e372fc57830
SHA1

22ae39fe543c4595644faf5be113b3b369108072
SHA256

7996a4c34b67d95a09a82014a601c51bcbf9de8d5d5aca6e3893619fb38ca7da
SHA512

5f3b6b7ad115ff88384c80517738602e10dfdf2d69a810c4238ad045fab4ac11ef7c11d32a0900e4c244459b4bdc07395041a75e7d57e59c331d57e3c5deee60
SSDEEP

12288:jsdquATDIvxo4dlaGCI7iKc3OaAdgGbC3YOpqWku:g8lXIvm4dA3YzPdgMJAku

Score

N/A

Malware Config

Signatures

Files

7996a4c34b67d95a09a82014a601c51bcbf9de8d5d5aca6e3893619fb38ca7da
.dll windows x86

540acea4363b2d6727c8e7f349b77a69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
WaitForSingleObject
GetModuleHandleA
UnhandledExceptionFilter
VirtualFree
LeaveCriticalSection
GetCurrentThreadId
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetLastError
InitializeCriticalSection
EnterCriticalSection
ReadFile
GetDateFormatA
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
RaiseException
LocalFree
FreeLibrary
GetTickCount
CloseHandle
GetModuleHandleW
InterlockedDecrement
CreateFileW
InterlockedIncrement
InterlockedExchange
DeleteCriticalSection
GetCurrentProcessId
GetModuleFileNameW

shell32

SHAddToRecentDocs
DragAcceptFiles
SHGetSpecialFolderLocation
ShellExecuteW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey

Exports

Exports

ArithmeticError
GetGlobals
UnicodeError
read_init_3
set_sCAL
warning

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

540acea4363b2d6727c8e7f349b77a69

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

Exports

Exports

Sections

.text Size: 180KB - Virtual size: 179KB

.rdata Size: 96KB - Virtual size: 93KB

.data Size: 44KB - Virtual size: 44KB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 180KB - Virtual size: 179KB

.rdata
Size: 96KB - Virtual size: 93KB

.data
Size: 44KB - Virtual size: 44KB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 8KB - Virtual size: 7KB