a5a29fe6297a628568d37288e4868525306e99948f458d1de7af1a39b584d4b1

Sharing

Copy URL

Twitter E-mail

General

Target

a5a29fe6297a628568d37288e4868525306e99948f458d1de7af1a39b584d4b1
Size

568KB
MD5

f13b0edb016bcf96106cf52e5ef5434c
SHA1

7447b11e700cd48400dd310302abebf1b4e1b040
SHA256

a5a29fe6297a628568d37288e4868525306e99948f458d1de7af1a39b584d4b1
SHA512

11bdf9c0860352df68dd291cf5ef795420d05e49845fb8b2282548810b82513957d02adb7d198dfef9dc9f33c75a99359969134d36334c8d44d7065c189371e5
SSDEEP

12288:J2+KaAdfXH09KsbaBJeagNjMKqewXJ8XavRhiHdkvgw:J2+BiH097GXw1qeA8XavRw2vg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a29fe6297a628568d37288e4868525306e99948f458d1de7af1a39b584d4b1

Files

a5a29fe6297a628568d37288e4868525306e99948f458d1de7af1a39b584d4b1
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

AbrirCD
AniadirClave
AppActivateHandle
BorraClave
BotonCerrar
CarregarTraducao
CarregarVariaveisAudio
CarregarVariaveisDesktop
CarregarVariaveisExtras
CarregarVariaveisTransferThumb
CarregarVariaveisWebCam
CarregarVariaveisWindows
CerrarVentana
CloseTcpConnect
CriarLista
EnviarDesk
FecharCD
FillDeviceList
FinalizarAudio
GetClipboardFiles
GetClipboardText
GetProc
GetWins
Hibernar
JPGtoBMP
ListarApp
ListarClaves
ListarValores
LowLevelKeybdHookProc
LowLevelMouseHookProc
MaximizarVentana
MinimizarTodas
MinimizarVentana
MostrarVentana
OcultarVentana
ReadTCPTable
ReadUdpTable
RenombrarClave
RutaProcesos
ServiceList
ServiceStatus
ServicioBorrar
ServicioCrear
SetClipboardText
ShowDesktop
ShowDeviceAdvancedInfo
ShowDeviceInterfaces
ShowStartButton
StartDevicesVar
StartTransferWebcam
StopDevicesVar
StopTransferDesktop
StopTransferWebcam
SwapMouseButtons
TaskBarHIDE
TerminarProceso
ThreadSendThumbs
ThreadTransferDesktop
ThreadedTransferAudio
TrayHIDE
TraySHOW
WindowsExit
setsuspendstate

Sections

CODE
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

CODE Size: 495KB - Virtual size: 495KB

DATA Size: 8KB - Virtual size: 7KB

BSS Size: - Virtual size: 10KB

.idata Size: 10KB - Virtual size: 10KB

.edata Size: 2KB - Virtual size: 1KB

.reloc Size: 30KB - Virtual size: 29KB

.rsrc Size: 21KB - Virtual size: 21KB

CODE
Size: 495KB - Virtual size: 495KB

DATA
Size: 8KB - Virtual size: 7KB

BSS
Size: - Virtual size: 10KB

.idata
Size: 10KB - Virtual size: 10KB

.edata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 30KB - Virtual size: 29KB

.rsrc
Size: 21KB - Virtual size: 21KB