b99a46efc6c5c3d25f880d92e5e251b7239cb66380b5fc320e88933cd5169f19

Sharing

Copy URL Twitter E-mail

General

Target

b99a46efc6c5c3d25f880d92e5e251b7239cb66380b5fc320e88933cd5169f19
Size

1016KB
MD5

56fc806be7599b62f94cd11f9d4d90e1
SHA1

93ce6eec32c286457cb9cfd3463dc6ed04ced393
SHA256

b99a46efc6c5c3d25f880d92e5e251b7239cb66380b5fc320e88933cd5169f19
SHA512

aa12b08ad2eeadfc88f636df13a17e952db5be0c8ac7af8581af0ec32a22023440f3d1f5d0ca107799321496fb3f599fae4deae94ca1ea2f8fdd6227958e0302
SSDEEP

6144:MxEp4XTJWzbRh0ScU+nBS6VEfuOCQ895jcM1:M+BzbRaSQSX3S95R

Score

N/A

Malware Config

Signatures

Files

b99a46efc6c5c3d25f880d92e5e251b7239cb66380b5fc320e88933cd5169f19
.dll windows x86

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
lstrcpyA
ResetEvent
ExitThread
GetStringTypeA
WriteFile
GetFileAttributesA
SetEndOfFile
lstrlenW
SetFilePointer
SetHandleCount
FreeLibrary
lstrlenA
InitializeCriticalSection
SetErrorMode
GetTempPathA
LocalFree
GlobalFindAtomA
RaiseException
MoveFileExA
GetModuleHandleA
GetEnvironmentStrings
GetCurrentProcessId
GetDiskFreeSpaceA
FindFirstFileA
FreeResource
LocalReAlloc
IsBadHugeReadPtr
GetStartupInfoA
HeapDestroy
lstrcpynA
GetDateFormatA
GetVersion
GetCurrentThread
GlobalAddAtomA
SetThreadLocale
GetCommandLineA
EnterCriticalSection
GetLocaleInfoA
GlobalDeleteAtom
IsBadReadPtr
VirtualAlloc
SetLastError
GetProcessHeap
GetModuleHandleW
GetCommandLineW
FindClose
GetCurrentThreadId
LoadLibraryA
GetStdHandle
MulDiv
VirtualFree
CreateEventA
ExitProcess

user32

GetWindow
GetFocus
FrameRect
IsWindowUnicode
GetMenu
EnumWindows
FindWindowA
GetActiveWindow

comctl32

ImageList_Draw
ImageList_Add
ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read

advapi32

RegOpenKeyA
RegEnumKeyA
RegQueryInfoKeyA

Exports

Exports

dfDtRd7VX0i7@24
XEHXr
_24GdBbOVM@8
emmtcJ_yO1Cnk
dxQoqSA@20
dF9YG@16
_cvWeKH@24
yzOgagWHt@4
m4fr2shCZlDD@8
_Ax6oI9AS@24
_2odhZ
Httlcbo
T_MhNNDZju84C
1SF5FXHRIQBQ3W@8
_LNvinOh9l0
XYvUet
7P2JAtGzsXIAc
Ynd57s
lSILxIyYGq7D@8
2qXe2A2o@16
fsIFUjMD
_wxEN41wehP1D
J5llFNtGSSZLRS@20
nrWPP5bhoM
_2x2Fha1iIZtJ@8
jdBWDemJo
slV3x@8
VcWZqX@24
UuU5Iq@12
_rWcxOJeBK8C
_lJ1vY
_EzOxcBCq
wkVvIEDg2BD1f4
_CX2S@20
ekkTpyM
_ewjZ8ru@12
Y0dACTNOfauc
_fg4vn5qa
_wsBc1lzg@4
_t1B0rNHTCV4@24
fb0JJZfpz
5Cop6U7@16
yTWVO@20
_I69unGmirA88
z3KK8f@8
_QYUr4qz
_TDzeTF0u0
bVDXn36zbM4Fib
_A1yx1z@12
_lKoVWzfal@24
qOitv
_OJpFDczHwf
Cjmd5WIrnd8UH@8
u7I8q
4hhoPzNHz
jabkYl6fu@4
_L_LL_wWhCVi
MF0ESYI@4
_z1jwX2TnO7HbH9@24
_IRLMTIZ9@4
_m8Dc7LPOUKl@4
DVLj7O
R4zXlgH26fg
_FELGDKM5tb
MyzYboX
_h7UEcxwda0_PO0

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad53ccf864afd8633b27ab98a05fec1

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 790KB - Virtual size: 789KB

.kudata Size: 173KB - Virtual size: 173KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 6KB - Virtual size: 5KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 790KB - Virtual size: 789KB

.kudata
Size: 173KB - Virtual size: 173KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 6KB - Virtual size: 5KB