d7d611d2831d47d00eb757d770c47baa85398b05a49c081cac802a74e31ce1c9

Sharing

Copy URL Twitter E-mail

General

Target

d7d611d2831d47d00eb757d770c47baa85398b05a49c081cac802a74e31ce1c9
Size

568KB
MD5

e1c1d96253e7f34b027f303778dfb820
SHA1

e92e89280aad25c7efea594cc07cc8db1a2bc00e
SHA256

d7d611d2831d47d00eb757d770c47baa85398b05a49c081cac802a74e31ce1c9
SHA512

46f4d8f922f9e30a79f91960550d47ea7d53662281b23335caf00eabaaa9318c9279118665003c4891e39aa62ef3788b91380e61f6d070cd71e59f2472b7b1e3
SSDEEP

12288:rSlAtI5/o9JWXStoGEQnViA4TE1oUDe8sB0tHVg2Q1E:rSytxvnViA4wHtVg2Qa

Score

N/A

Malware Config

Signatures

Files

d7d611d2831d47d00eb757d770c47baa85398b05a49c081cac802a74e31ce1c9
.dll windows x86

48e65bf3055d9e49d8c00f45057795d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
InitializeCriticalSection
VirtualAlloc
LeaveCriticalSection
InterlockedDecrement
RaiseException
GetModuleFileNameW
GetTickCount
CreateMutexW
GetSystemTimeAsFileTime
InterlockedIncrement
LocalFree
lstrlenW
FreeLibrary
EnterCriticalSection
Sleep
GetVersionExA
InterlockedCompareExchange
GetDateFormatA
QueryPerformanceCounter
GetLastError
LocalAlloc
GetThreadLocale
TerminateProcess
WideCharToMultiByte
CloseHandle
GlobalFree
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
LoadResource
GlobalAlloc
CreateEventW
InterlockedExchange
UnhandledExceptionFilter
WaitForSingleObject
SetUnhandledExceptionFilter
GetModuleHandleA
SetEvent
ReadFile
DeviceIoControl
CreateFileW
MultiByteToWideChar
DeleteCriticalSection

oleaut32

SysFreeString
VarUI4FromStr
UnRegisterTypeLi
SysStringLen
LoadTypeLi
RegisterTypeLi
SysAllocString

advapi32

RegQueryValueExW
RegOpenUserClassesRoot
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegCloseKey
CryptGetKeyParam

shell32

ShellExecuteW

ole32

CoTaskMemAlloc
CoUninitialize
CoTaskMemRealloc
CoInitializeEx
CoCreateInstance
CoInitialize

Exports

Exports

ClearFreeList
InteractLoop
List_Size
Warning
ZeroDivisiError
set_convert_mono
set_hIST
vInitA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48e65bf3055d9e49d8c00f45057795d1

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 140KB - Virtual size: 140KB

.rsrc Size: 156KB - Virtual size: 155KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 140KB - Virtual size: 140KB

.rsrc
Size: 156KB - Virtual size: 155KB

.reloc
Size: 8KB - Virtual size: 7KB