72364f31872a9bb74892e1fd20b451d0702d42171e44611b9c7f0fd84c534611

Sharing

Copy URL Twitter E-mail

General

Target

72364f31872a9bb74892e1fd20b451d0702d42171e44611b9c7f0fd84c534611
Size

2.9MB
MD5

07b370f0112954d7a7d2c9f35ddf9d76
SHA1

7a62f0c044e3697866128c40177a4b7f71f9c2d8
SHA256

72364f31872a9bb74892e1fd20b451d0702d42171e44611b9c7f0fd84c534611
SHA512

ce10e4bf812537c805e89a5ec0d4e134cbbb2ecc41c0004badc6afe883f8fb95182c55c1f35c7e462d1219e5a126e9a0096ec819ebe0ad2e7c389fd4f98bc188
SSDEEP

49152:iBjXskXXzhdDRXZLHhSsrxSXOD+9y4vBCz+Zn/1X6xp0+YgGz4TYUPp7wHfe3GME:Yj8kXXzhpF5HhSsrxSXh9y4vBAen/1Xx

Score

N/A

Malware Config

Signatures

Files

72364f31872a9bb74892e1fd20b451d0702d42171e44611b9c7f0fd84c534611
.dll windows x86

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ace

ord3
ord2
ord4

agm

ord4
ord3

bib

ord5
ord4
ord11

cooltype

ord3
ord1

winmm

mmioSetInfo
mmioSeek
mmioDescend
mmioRead
mmioOpenA
mmioAdvance
mmioGetInfo
mmioClose

kernel32

ReleaseMutex
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
GetProcAddress
LoadLibraryA
FreeLibrary
GetTempPathA
CreateDirectoryA
GetFileAttributesA
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
CreateMutexA
GetLocaleInfoA
OutputDebugStringA
DisableThreadLibraryCalls
SetThreadPriority
CreateThread
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceFrequency
QueryPerformanceCounter
MapViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
UnmapViewOfFile
InterlockedIncrement
Sleep
GetLastError
InterlockedDecrement
MultiByteToWideChar
ResetEvent
GetVersionExA
GetACP
GetUserDefaultLCID
WideCharToMultiByte
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetCurrentThreadId
IsValidLocale
EnumSystemLocalesA
GetModuleFileNameA
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
DeleteFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapReAlloc
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetEndOfFile
GetTimeFormatA
GetDateFormatA
SetLastError
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
HeapSize
GetStdHandle
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
VirtualAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

user32

wsprintfA
GetKeyboardLayout

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DllMain
SOMPackageGetEntryPoints

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 604KB - Virtual size: 602KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f787730bd1c0ace1216e4adf5cb09da

Headers

File Characteristics

Imports

ace

agm

bib

cooltype

winmm

kernel32

user32

ole32

advapi32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 604KB - Virtual size: 602KB

.data Size: 132KB - Virtual size: 267KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 196KB - Virtual size: 194KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 604KB - Virtual size: 602KB

.data
Size: 132KB - Virtual size: 267KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 196KB - Virtual size: 194KB

.text
Size: 100KB - Virtual size: 100KB