5c96cc6e2127897172b5c900c78e668d302d39bd378e12b49724869e4fe50768

Sharing

Copy URL Twitter E-mail

General

Target

5c96cc6e2127897172b5c900c78e668d302d39bd378e12b49724869e4fe50768
Size

4.2MB
MD5

7571f877c5c57a04e2261a19bc382b76
SHA1

8010bc2fcdf234840c03ff3d24d030396622970b
SHA256

5c96cc6e2127897172b5c900c78e668d302d39bd378e12b49724869e4fe50768
SHA512

8b96591ba518fc381f1412061b9a8e20c6db99d2a547ee67a480afb51b4b017dfb7e0051fbd37fedb515dcbd534b8bce9b93bcc51bd3523cbf810425763af26b
SSDEEP

49152:r0JrT53ZsAirb/TSvO90d7HjmAFd4A64nsfJ5JX15Y1LQR28zWvGkx1vxag5EVkl:83Ii1OqjEiV

Score

N/A

Malware Config

Signatures

Files

5c96cc6e2127897172b5c900c78e668d302d39bd378e12b49724869e4fe50768
.dll windows x64

40c7546946a5a2ca4587eee6ba6ef017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
PostQueuedCompletionStatus
QueryPerformanceCounter
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenA

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_beginthread
_errno
_exit
_gmtime64
_initterm
_lock
_setjmp
_snwprintf
_time64
_unlock
_vsnprintf
abort
atof
atoi
calloc
clock
exit
fclose
fflush
fopen
fprintf
fputc
fread
free
frexp
fseek
ftell
fwprintf
fwrite
isupper
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memset
puts
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
tolower
vfprintf
wcscpy
wcslen

user32

ActivateKeyboardLayout
CallNextHookEx
ClientToScreen
CloseClipboard
DispatchMessageA
EmptyClipboard
EnumDisplayMonitors
EnumWindows
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDC
GetDoubleClickTime
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetMessageA
GetMessageTime
GetSystemMetrics
GetWindowLongPtrA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IsWindow
MapVirtualKeyA
MessageBoxA
MessageBoxW
OpenClipboard
PostMessageA
PostThreadMessageA
ReleaseDC
SendInput
SetClipboardData
SetForegroundWindow
SetWinEventHook
SetWindowPos
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA

Exports

Exports

EdgeAPI
_cgo_dummy_export
go_send
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_logger
hook_stop

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 385KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40c7546946a5a2ca4587eee6ba6ef017

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.data Size: 235KB - Virtual size: 235KB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.pdata Size: 11KB - Virtual size: 10KB

.xdata Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 385KB

.edata Size: 1024B - Virtual size: 522B

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 235KB - Virtual size: 235KB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.pdata
Size: 11KB - Virtual size: 10KB

.xdata
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 385KB

.edata
Size: 1024B - Virtual size: 522B

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 30KB - Virtual size: 29KB