c4062f4eb6edbb7e22d3b035a0d979e484c9aac70e4c6eb4a261081ce445d7a0

General

Target

c4062f4eb6edbb7e22d3b035a0d979e484c9aac70e4c6eb4a261081ce445d7a0
Size

575KB
MD5

ae0c5660d98b0756a29861b65c435a73
SHA1

132e30e2c2174584d3b6bb9d39ea98c97384c197
SHA256

c4062f4eb6edbb7e22d3b035a0d979e484c9aac70e4c6eb4a261081ce445d7a0
SHA512

fb1c28b5a6ab3b24f3b2a73145640220d5536bdd7530d51e95b4cb806caccb074b46bf1ccfe78603750848cd67c62e7bb2bf54a1ce61e427453582a4f1f5be42
SSDEEP

12288:uyLEO9RhJbBKRiecMY5af6hdxiKmlQypIvpibvpb9:uyLVRtvMDEdTcQypJB

Score

N/A

Malware Config

Signatures

Files

c4062f4eb6edbb7e22d3b035a0d979e484c9aac70e4c6eb4a261081ce445d7a0
.dll windows x86

1790b2cf216405f9d8002d26e007bedd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileW
CreateThread
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetSystemMetrics
GetForegroundWindow
GetCursorPos
GetClassNameA
PostMessageA
GetWindowRect
FindWindowExA

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

Exports

Exports

EnvironmentError
Member2_GetOne
Number_Divmod
ProgramText
Warn
_InterruptOccurred
get_pixels_per_meter
get_y_offset_pixels

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1790b2cf216405f9d8002d26e007bedd

Headers

File Characteristics

Imports

kernel32

user32

setupapi

Exports

Exports

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 54KB - Virtual size: 54KB

.data Size: 156KB - Virtual size: 157KB

.rsrc Size: 217KB - Virtual size: 216KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 54KB - Virtual size: 54KB

.data
Size: 156KB - Virtual size: 157KB

.rsrc
Size: 217KB - Virtual size: 216KB

.reloc
Size: 9KB - Virtual size: 9KB