9de24bc3c8ee404650567829cd117e1e7c42287f4627f1bc76b5aca68b524598

General

Target

9de24bc3c8ee404650567829cd117e1e7c42287f4627f1bc76b5aca68b524598
Size

73KB
MD5

85bdf220d5d503eb12763e4fcabf7e35
SHA1

33d0984e6cccde9955e4bcab7c3ef057a3e0bf99
SHA256

9de24bc3c8ee404650567829cd117e1e7c42287f4627f1bc76b5aca68b524598
SHA512

f4a04ae7490196fca52932c869e6f77c0c1a30d2ed40008d10340871c2d30f9c46764b54fb53d6b8c20664e19c6860f0566018f07ac27f80c317087acff29014
SSDEEP

1536:AN01nobYgBzN5YrSDKQ3oZlBZ0+uRXIdoN/fzX6oG/oonjOVm:bojYOvWlBZ7uBIeL0/7jO0

Score

N/A

Malware Config

Signatures

Files

9de24bc3c8ee404650567829cd117e1e7c42287f4627f1bc76b5aca68b524598
.dll windows x86

f1546874428dd75b8a20c3225f120f08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WideCharToMultiByte
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
FreeLibrary
TlsFree
GetVersionExA
lstrcpyA
lstrcatA
GetStringTypeExA
CreateFileA
TlsSetValue
GetModuleHandleA
GetDriveTypeA
DeviceIoControl
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStringTypeW
CloseHandle
lstrlenA
VirtualProtect
IsDBCSLeadByte
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetSystemInfo

user32

CharUpperA
wvsprintfA
LoadStringA
wsprintfA
CharNextA
CharPrevA

advapi32

RegCloseKey

gdi32

GetObjectA
CreateFontIndirectA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1546874428dd75b8a20c3225f120f08

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 36KB - Virtual size: 69KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 36KB - Virtual size: 69KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB