7284c272d58b8547f71a021a5cd4a1b1b9801ee6309c3e21989f3d2ab3b7691f

Sharing

Copy URL Twitter E-mail

General

Target

7284c272d58b8547f71a021a5cd4a1b1b9801ee6309c3e21989f3d2ab3b7691f
Size

616KB
MD5

999fb740bb5a0ea8d4fa409c0f7a52c0
SHA1

da795e95f189259a2f3ae8a8d51957e826bfe73a
SHA256

7284c272d58b8547f71a021a5cd4a1b1b9801ee6309c3e21989f3d2ab3b7691f
SHA512

45b2f4b9eb3d67deda791fe4d806c7e54bfb154cb76aade8db0e20974723c03de8e1527a5edc70bfc9b5ade9654af79905aee0c15f6312b65616144e14de1286
SSDEEP

12288:tuoHsVLl4tRSpWQ7++2fLHH+8w/ulzC4zj2L+0Nr/qkNlPNCnNr0f:tuoMVx4qpN7+JLw/wzC4zCL+yyBnNr

Score

N/A

Malware Config

Signatures

Files

7284c272d58b8547f71a021a5cd4a1b1b9801ee6309c3e21989f3d2ab3b7691f
.dll windows x86

e536fe00b771d029262276a250c85200

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
SHGetSpecialFolderLocation
ShellExecuteW

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW

ole32

CoInitialize
CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi

kernel32

WideCharToMultiByte
lstrlenW
GetCurrentThreadId
WaitForSingleObject
VirtualAlloc
UnhandledExceptionFilter
TzSpecificLocalTimeToSystemTime
SetUnhandledExceptionFilter
SetEvent
SetConsoleCursorPosition
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
LocalFree
LoadResource
LeaveCriticalSection
CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcessId
GetDateFormatA
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetTickCount
GetVersionExA
GlobalAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement

Exports

Exports

Fetch
GetMin
Long_FromVoidPtr
PendingDeprecationWarning
get_copyright
get_hIST
process_data

Sections

.text
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e536fe00b771d029262276a250c85200

Headers

File Characteristics

Imports

shell32

advapi32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 173KB

.rdata Size: 68KB - Virtual size: 67KB

.data Size: 200KB - Virtual size: 200KB

.rsrc Size: 160KB - Virtual size: 159KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 176KB - Virtual size: 173KB

.rdata
Size: 68KB - Virtual size: 67KB

.data
Size: 200KB - Virtual size: 200KB

.rsrc
Size: 160KB - Virtual size: 159KB

.reloc
Size: 8KB - Virtual size: 7KB