57ff7964830012e161873f1b685b20636b2ec8b906306dcd56f0baff49e07f4f

Sharing

Copy URL Twitter E-mail

General

Target

57ff7964830012e161873f1b685b20636b2ec8b906306dcd56f0baff49e07f4f
Size

571KB
MD5

a5fc62df47c6ef1fcb6349f133490325
SHA1

b77e80f78c6d6bac3f7ead4a29563be867c65448
SHA256

57ff7964830012e161873f1b685b20636b2ec8b906306dcd56f0baff49e07f4f
SHA512

e9f3d58d885418a25a7fb0b21e5f34b96a388d48fb69c325ecc3b14106a509d65b4e4592c539df86cdf6897ad064ed38838344cc0953837ce59dd0041c7b83c7
SSDEEP

12288:XAbJrgCG/BJ+QHoRJ2KlaDqZ02n1wlK10t9Cv+9DCik9:XVCGpJbIFbl1wlK10tYcGi0

Score

N/A

Malware Config

Signatures

Files

57ff7964830012e161873f1b685b20636b2ec8b906306dcd56f0baff49e07f4f
.dll windows x86

b70208f9d6e2d02d1a52df7acca1e954

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowVisible
GetWindowRect
IsZoomed
MoveWindow
RegisterClipboardFormatA
SetFocus
SetWindowsHookExA
ShowWindow
UnhookWindowsHookEx
IsIconic
CharNextA
CharNextW
CreateDialogParamA
DestroyWindow
GetForegroundWindow
GetParent
GetSystemMetrics
GetWindowLongA
CallNextHookEx

kernel32

lstrlenW
lstrlenA
lstrcmpiA
WriteFile
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
TlsSetValue
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadResource
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue

oleaut32

VarUI4FromStr
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
VariantClear

ole32

StringFromGUID2
CreateDataAdviseHolder
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance

advapi32

RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

Exports

Exports

Init
IsSubclass
OverflowError
SystemExit

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b70208f9d6e2d02d1a52df7acca1e954

Headers

File Characteristics

Imports

user32

kernel32

oleaut32

ole32

advapi32

Exports

Exports

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 330KB - Virtual size: 330KB

.data Size: 106KB - Virtual size: 106KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 330KB - Virtual size: 330KB

.data
Size: 106KB - Virtual size: 106KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 5KB - Virtual size: 4KB