7f8cd3b278d2b78cf358b909463f24afab06466bdaafb70f958033c4d6e6ae61

Sharing

Copy URL

Twitter E-mail

General

Target

7f8cd3b278d2b78cf358b909463f24afab06466bdaafb70f958033c4d6e6ae61
Size

4.2MB
MD5

f681eaace5cf672753b35f099f40940b
SHA1

6b1d1086ac49f6f2bd61a2ba8cbd4e90c24b81dc
SHA256

7f8cd3b278d2b78cf358b909463f24afab06466bdaafb70f958033c4d6e6ae61
SHA512

20042955d6514986893809e35c0c5ab5f0ef73431218bc33b8ad341a68906c38303a607f385641b79c82bf71fd10e11ef90a1d3804e6e0d8521cadf9826d02b6
SSDEEP

49152:HaK35L3QFerb/TIvO90d7HjmAFd4A64nsfJVa4Gz1RnWsxj5Ubhx16Eag5EVkl0z:N3uZRj2fE9vC

Score

N/A

Malware Config

Signatures

Files

7f8cd3b278d2b78cf358b909463f24afab06466bdaafb70f958033c4d6e6ae61
.dll windows x64

40c7546946a5a2ca4587eee6ba6ef017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenA

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_beginthread
_errno
_exit
_gmtime64
_initterm
_lock
_setjmp
_snwprintf
_time64
_unlock
_vsnprintf
abort
atof
atoi
calloc
clock
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
frexp
fseek
ftell
fwprintf
fwrite
isupper
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memset
puts
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
tolower
vfprintf
wcscpy
wcslen

user32

ActivateKeyboardLayout
CallNextHookEx
ClientToScreen
CloseClipboard
DispatchMessageA
EmptyClipboard
EnumDisplayMonitors
EnumWindows
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDC
GetDoubleClickTime
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetMessageA
GetMessageTime
GetSystemMetrics
GetWindowLongPtrA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IsWindow
MapVirtualKeyA
MessageBoxA
MessageBoxW
OpenClipboard
PostMessageA
PostThreadMessageA
ReleaseDC
SendInput
SetClipboardData
SetForegroundWindow
SetWinEventHook
SetWindowPos
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA

Exports

Exports

EdgeAPI
_cgo_dummy_export
go_send
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_logger
hook_stop
main

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 385KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40c7546946a5a2ca4587eee6ba6ef017

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.data Size: 234KB - Virtual size: 233KB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.pdata Size: 11KB - Virtual size: 10KB

.xdata Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 385KB

.edata Size: 1024B - Virtual size: 537B

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 234KB - Virtual size: 233KB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.pdata
Size: 11KB - Virtual size: 10KB

.xdata
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 385KB

.edata
Size: 1024B - Virtual size: 537B

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 30KB - Virtual size: 29KB