9cc0670f5fe75091dd04847900dc3918d96993d52f2d90c7a8138903f0efd830

General

Target

9cc0670f5fe75091dd04847900dc3918d96993d52f2d90c7a8138903f0efd830
Size

112KB
MD5

47becad742cd59cac3befc9152106cd8
SHA1

3a21ae0b689673c9a0aba51e5bfb2b580cd589a3
SHA256

9cc0670f5fe75091dd04847900dc3918d96993d52f2d90c7a8138903f0efd830
SHA512

409cdc6a1462907362f5451ed305f023f30bd87f3c7376a261df86cd45de538e1acb191b8b4e6456853d44ed8aa4c4b3e2c5f90916ba1a73ad7856873f3e8a9e
SSDEEP

3072:Y9vnaM3nJGKxSXVyclDDMXkq/9xGiVDdSN0D5x:Y9vna4m4ODMt1MuSN0D5x

Score

N/A

Malware Config

Signatures

Files

9cc0670f5fe75091dd04847900dc3918d96993d52f2d90c7a8138903f0efd830
.dll windows x86

a9ab5f6f5b1b849541eef71a288b0380

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
Sleep
OpenEventA
GetCommandLineA
InterlockedIncrement
CreateDirectoryA
CloseHandle
CreateEventA
GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateProcessA
SetLastError
GetTickCount
LeaveCriticalSection
InterlockedDecrement
ReleaseMutex
WaitForSingleObject
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
lstrlenA
GetModuleFileNameA
ExitProcess
CopyFileA
lstrlenW
InterlockedCompareExchange
GetLastError

ole32

CoInitialize
OleSetContainedObject
CreateBindCtx
CoCreateGuid
OleCreate
CoUninitialize

user32

DispatchMessageA
SetTimer
PostMessageA
GetClassNameA
SetWindowLongA
CreateWindowExA
SendMessageA
GetSystemMetrics
TranslateMessage
GetMessageA
FindWindowA
GetParent
PostQuitMessage
KillTimer
RegisterWindowMessageA
GetWindowLongA
DefWindowProcA
DestroyWindow

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

winUserServ

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9ab5f6f5b1b849541eef71a288b0380

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

advapi32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 3KB