4bf2e34ff536cd2253aa7d298ea385b7940c235b68f73af2d70f7535f9bf269f

Sharing

Copy URL Twitter E-mail

General

Target

4bf2e34ff536cd2253aa7d298ea385b7940c235b68f73af2d70f7535f9bf269f
Size

610KB
MD5

34da0ea2a7c073da1107e87ac3d02e70
SHA1

a537a91d53a450eba8fbc304c3996580b17d0396
SHA256

4bf2e34ff536cd2253aa7d298ea385b7940c235b68f73af2d70f7535f9bf269f
SHA512

799071a83e94fbc78b8848975b853eb42a34c245f28690d5ea2430a4cd62c0ea0b2c4108440b4dfa912f7acdf099b3e6ade5ec9c98317de7a69c28b6627fe79e
SSDEEP

12288:g6zvz/qlkMR3PZ2GLxe0DE1hkcqN7uZZXB74xelDsbKXDaNr33r6ka:g6alR3PZxx7DET/j740lD5DaZ7Y

Score

N/A

Malware Config

Signatures

Files

4bf2e34ff536cd2253aa7d298ea385b7940c235b68f73af2d70f7535f9bf269f
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference
HidservInstaller
RY2_Find
RY2_Open
RY2_Read

Sections

.textbss
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 599KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 796B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.textbss Size: - Virtual size: 752KB

.text Size: 3KB - Virtual size: 4KB

.data Size: 599KB - Virtual size: 600KB

.idata Size: 796B - Virtual size: 4KB

.edata Size: 1KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 24B - Virtual size: 4KB

.textbss
Size: - Virtual size: 752KB

.text
Size: 3KB - Virtual size: 4KB

.data
Size: 599KB - Virtual size: 600KB

.idata
Size: 796B - Virtual size: 4KB

.edata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 24B - Virtual size: 4KB