378178d7e06678d6c08b2be3c0fb68b6f7d0c4a5a15d6f2c8f1ffcb9aa5e253a

Sharing

Copy URL

Twitter E-mail

General

Target

378178d7e06678d6c08b2be3c0fb68b6f7d0c4a5a15d6f2c8f1ffcb9aa5e253a
Size

325KB
MD5

c1c4a49dfb7bc090b05b2243b9bb0452
SHA1

4379ef707106f4518965a10526e39c1c38035df0
SHA256

378178d7e06678d6c08b2be3c0fb68b6f7d0c4a5a15d6f2c8f1ffcb9aa5e253a
SHA512

ae909fc4d4e1600500ad7b9eb5340c3ee6d84109c9f55b41656bcc799ac1640d248abd755e15db82e6fb23b7ba5d9705dfd00ddf79a6352558923c055bd89ecb

Score

N/A

Malware Config

Signatures

Files

378178d7e06678d6c08b2be3c0fb68b6f7d0c4a5a15d6f2c8f1ffcb9aa5e253a
.exe windows x86

652ae2ee887dccb74bd735ae0f97518b

Code Sign

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetTickCount
CloseHandle
GetDateFormatEx
GetLocalTime
GetStdHandle
GetDriveTypeW
GetLastError
GetVolumeInformationW
SetErrorMode
LCMapStringW
GetDateFormatA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
CreateEventA
SystemTimeToFileTime
CompareFileTime
GetCurrentProcessId
OpenProcess
WaitForMultipleObjects
WaitForSingleObject
GetCurrentProcess
VirtualAllocEx
LCMapStringA
SetFilePointerEx
GetCPInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte

user32

SetClassWord
KillTimer
GetCaretBlinkTime
GetShellWindow
SetParent
EnumWindowStationsA
GetWindowThreadProcessId
IsWindowVisible
IsZoomed
GetWindowLongA
GetMenuItemInfoA
IsWindowUnicode
IsChild
GetSystemMetrics
GetCursorPos
GetDC
SendMessageA
UpdateWindow

advapi32

ImpersonateLoggedOnUser
GetSidSubAuthorityCount
GetAclInformation
GetSidIdentifierAuthority
DuplicateToken
GetLengthSid
GetSidLengthRequired
ImpersonateAnonymousToken
GetNamedSecurityInfoA
GetTokenInformation

shell32

SHGetFolderLocation
SHBindToParent

ole32

CoInitialize

psapi

EnumProcesses
EnumProcessModules
GetModuleFileNameExA

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

652ae2ee887dccb74bd735ae0f97518b

Code Sign

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

psapi

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 175KB - Virtual size: 174KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 175KB - Virtual size: 174KB