59184a7156e5b53f141f0d3d6deaee71a45e861e03607fd7dc0e1c8299628edd

Resubmissions

27-12-2022 11:33

221227-npb93seg88 3

27-12-2022 11:22

221227-ngrpsseg79 3

Sharing

Copy URL

Twitter E-mail

General

Target

59184a7156e5b53f141f0d3d6deaee71a45e861e03607fd7dc0e1c8299628edd
Size

275KB
MD5

367761c64b0c817d2aaf5b505e6e6397
SHA1

4fa32c6aaa0fdbb9d5c8f6c851c6056ddfc83686
SHA256

59184a7156e5b53f141f0d3d6deaee71a45e861e03607fd7dc0e1c8299628edd
SHA512

cbcee201976c4005ffe2b81bc685707cfe7a98c132e72a9da195e03e13f1e54ea0f77e1b700e1954cc3fef45e23606a6e95f04387adfb0dc458cecf8ff499375
SSDEEP

6144:Xqa0yp2RGnhCURSzWGO+JWv41HJG8bRtmWKlUv:XqGfCURGWGlJu41Hw8nKM

Score

N/A

Malware Config

Signatures

Files

59184a7156e5b53f141f0d3d6deaee71a45e861e03607fd7dc0e1c8299628edd
.dll windows x64

0a82372fa6d177fa08bd7f5bacd34b5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

DdeCmpStringHandles
DdeCreateStringHandleW
IsDialogMessageA
GetWindow
MessageBeep
MessageBoxA
GetWindowRgn
GetMessageTime
DrawTextA
CharNextA
CharLowerBuffW
IsDlgButtonChecked
EndDialog
SendNotifyMessageW
DrawTextW

kernel32

ExitProcess
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW

Exports

Exports

A3FftF
A3YDzfbCT
AGp2v3Y
AzLXFzblJlm
B9UWCPuUS
BBet92Nn
BXkH73BGsdK
Bgay5LmaZp
BrVQFjNQrxk
CqAFpH
PluginInit

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

0a82372fa6d177fa08bd7f5bacd34b5d

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 180KB - Virtual size: 180KB

.data Size: 2KB - Virtual size: 6KB

.pdata Size: 3KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 180KB - Virtual size: 180KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 1KB