d762df6b2d75a76c956655c60f9cec4bb66ae94cd2920abc65807b2bf4a3f6bd

Sharing

Copy URL Twitter E-mail

General

Target

d762df6b2d75a76c956655c60f9cec4bb66ae94cd2920abc65807b2bf4a3f6bd
Size

1016KB
MD5

4cf1625bd42078e92f5b6e94b2c87ae5
SHA1

b55bb93ea570572e046013cb239974cc674d024d
SHA256

d762df6b2d75a76c956655c60f9cec4bb66ae94cd2920abc65807b2bf4a3f6bd
SHA512

d512717a104670ded49e69bd61a6e10f10358ed17fc075cbc605733236b9ebe1380059dcd4fb0c26ed4dc61466c7854c209456bdec2ff3535e65e3ecb672829c
SSDEEP

6144:MxEp4XrJWzbRh0ScU+nBS6VEfuOCQ895jcM1:M+BzbRaSQSX3S95R

Score

N/A

Malware Config

Signatures

Files

d762df6b2d75a76c956655c60f9cec4bb66ae94cd2920abc65807b2bf4a3f6bd
.dll windows x86

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
lstrcpyA
ResetEvent
ExitThread
GetStringTypeA
WriteFile
GetFileAttributesA
SetEndOfFile
lstrlenW
SetFilePointer
SetHandleCount
FreeLibrary
lstrlenA
InitializeCriticalSection
SetErrorMode
GetTempPathA
LocalFree
GlobalFindAtomA
RaiseException
MoveFileExA
GetModuleHandleA
GetEnvironmentStrings
GetCurrentProcessId
GetDiskFreeSpaceA
FindFirstFileA
FreeResource
LocalReAlloc
IsBadHugeReadPtr
GetStartupInfoA
HeapDestroy
lstrcpynA
GetDateFormatA
GetVersion
GetCurrentThread
GlobalAddAtomA
SetThreadLocale
GetCommandLineA
EnterCriticalSection
GetLocaleInfoA
GlobalDeleteAtom
IsBadReadPtr
VirtualAlloc
SetLastError
GetProcessHeap
GetModuleHandleW
GetCommandLineW
FindClose
GetCurrentThreadId
LoadLibraryA
GetStdHandle
MulDiv
VirtualFree
CreateEventA
ExitProcess

user32

GetWindow
GetFocus
FrameRect
IsWindowUnicode
GetMenu
EnumWindows
FindWindowA
GetActiveWindow

comctl32

ImageList_Draw
ImageList_Add
ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read

advapi32

RegOpenKeyA
RegEnumKeyA
RegQueryInfoKeyA

Exports

Exports

dfDtRd7VX0i7@24
XEHXr
_24GdBbOVM@8
emmtcJ_yO1Cnk
dxQoqSA@20
dF9YG@16
_cvWeKH@24
yzOgagWHt@4
m4fr2shCZlDD@8
_Ax6oI9AS@24
_2odhZ
Httlcbo
T_MhNNDZju84C
1SF5FXHRIQBQ3W@8
_LNvinOh9l0
XYvUet
7P2JAtGzsXIAc
Ynd57s
lSILxIyYGq7D@8
2qXe2A2o@16
fsIFUjMD
_wxEN41wehP1D
J5llFNtGSSZLRS@20
nrWPP5bhoM
_2x2Fha1iIZtJ@8
jdBWDemJo
slV3x@8
VcWZqX@24
UuU5Iq@12
_rWcxOJeBK8C
_lJ1vY
_EzOxcBCq
wkVvIEDg2BD1f4
_CX2S@20
ekkTpyM
_ewjZ8ru@12
Y0dACTNOfauc
_fg4vn5qa
_wsBc1lzg@4
_t1B0rNHTCV4@24
fb0JJZfpz
5Cop6U7@16
yTWVO@20
_I69unGmirA88
z3KK8f@8
_QYUr4qz
_TDzeTF0u0
bVDXn36zbM4Fib
_A1yx1z@12
_lKoVWzfal@24
qOitv
_OJpFDczHwf
Cjmd5WIrnd8UH@8
u7I8q
4hhoPzNHz
jabkYl6fu@4
_L_LL_wWhCVi
MF0ESYI@4
_z1jwX2TnO7HbH9@24
_IRLMTIZ9@4
_m8Dc7LPOUKl@4
DVLj7O
R4zXlgH26fg
_FELGDKM5tb
MyzYboX
_h7UEcxwda0_PO0

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 790KB - Virtual size: 789KB

.kudata Size: 173KB - Virtual size: 173KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 6KB - Virtual size: 5KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 790KB - Virtual size: 789KB

.kudata
Size: 173KB - Virtual size: 173KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 6KB - Virtual size: 5KB