ffe6e42c82d8c30623ab735ece82b059c8f1da4fd137f248685adc016041c1b6

Sharing

Copy URL

Twitter E-mail

General

Target

ffe6e42c82d8c30623ab735ece82b059c8f1da4fd137f248685adc016041c1b6
Size

141KB
MD5

df4dcbc3624d01093ecf5b7cda186d61
SHA1

8d3647b0a618da55dfbc2d1164d049c5c5f034ae
SHA256

ffe6e42c82d8c30623ab735ece82b059c8f1da4fd137f248685adc016041c1b6
SHA512

5951787e108cd46a06cb86ef289b0068e815d4015afa1fe2f213904dcb857264c3608ab45501d9281a078f2c2629f3ab7023421fc36c9977fd88ef3771396301
SSDEEP

3072:0Lo8S9dRVnJ6BptQCbMNKfKlvyxykvSlRRGxN:0Lo8SnEuCbMg0Rpkx

Score

N/A

Malware Config

Signatures

Files

ffe6e42c82d8c30623ab735ece82b059c8f1da4fd137f248685adc016041c1b6
.exe windows x86

87e9e01388065f67ae66a8812f0f49fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalTime
WriteTapemark
GetNamedPipeHandleStateA
_lcreat
SetTapeParameters
GetTickCount
GetPriorityClass
ActivateActCtx
FindResourceExA
GlobalAlloc
TerminateThread
GetPrivateProfileStructW
GetSystemPowerStatus
SetSystemTimeAdjustment
SetConsoleMode
GetBinaryTypeA
CompareStringW
lstrlenW
DeactivateActCtx
WritePrivateProfileStructA
SetCurrentDirectoryA
GetTapeStatus
LoadLibraryA
CreateSemaphoreW
GetConsoleScreenBufferInfo
LocalAlloc
BuildCommDCBAndTimeoutsW
SetConsoleDisplayMode
GetProfileStringA
SetFileApisToANSI
AddAtomA
GetTapeParameters
ContinueDebugEvent
VirtualProtect
CloseHandle
lstrcpyW
GetPrivateProfileIntW
GetThreadContext
GetStartupInfoW
HeapAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA

user32

GetListBoxInfo

gdi32

GetBitmapDimensionEx

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 43.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87e9e01388065f67ae66a8812f0f49fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 43.5MB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 43.5MB

.rsrc
Size: 15KB - Virtual size: 15KB