9c90ad9130a074fce88c7d00db56fa047b0523b1df6c7265871daff65309b219

Sharing

Copy URL Twitter E-mail

General

Target

9c90ad9130a074fce88c7d00db56fa047b0523b1df6c7265871daff65309b219
Size

208KB
MD5

0fc807508762aab623d2f1e77ce01494
SHA1

b8cd955b309a49ff63f44da301ab5c2a4a54225b
SHA256

9c90ad9130a074fce88c7d00db56fa047b0523b1df6c7265871daff65309b219
SHA512

da03c7e41ef6bf832ba0b84319ee3b898e024cb259e7443d55f96268506b68d8583bcc4f4a7f9d2ee2124de59f5467054913c2d3f0bcebce4ad65ca976253f59
SSDEEP

6144:Uxv+pTXOUV9ZT/d/P1EMQeeaQee4QeesQee2lQeehQeeSsPEegA0MZ:Ov+pTXOUjp5SuEy0

Score

N/A

Malware Config

Signatures

Files

9c90ad9130a074fce88c7d00db56fa047b0523b1df6c7265871daff65309b219
.dll windows x86

d1257303355e131e2aa8bdd39b462e5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
WriteProcessMemory
GetModuleHandleA
CreateThread
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
CloseHandle
Sleep
GetVersionExA
VirtualProtect
MulDiv
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
OutputDebugStringA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
RaiseException
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
ReadProcessMemory

user32

GetAsyncKeyState
MessageBeep

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1257303355e131e2aa8bdd39b462e5e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 160KB - Virtual size: 159KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 12KB - Virtual size: 82KB

.sxdata Size: 4KB - Virtual size: 8B

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 160KB - Virtual size: 159KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 12KB - Virtual size: 82KB

.sxdata
Size: 4KB - Virtual size: 8B

.reloc
Size: 12KB - Virtual size: 8KB