af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84

Sharing

Copy URL

Twitter E-mail

General

Target

af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
Size

391KB
MD5

cd9e3536590327613be84363a14d2e1f
SHA1

f5c94e2c0bd168e9858df03769b53d600befb86f
SHA256

af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
SHA512

a8418d8ff4e8130aa5dde0f872940237a59a8ca3e1c659ef603d161167693efb4f33f02a70facbc860e281584dbb0ecd69776526fb81a1ae73a44e182d73e109
SSDEEP

6144:tE3hzekYGKHCNsKkT6hns9w0AlDGKm5bIakO0sMT5VXyBfjS6Csc:4hzekYGKHCNsKfhs9pWD7ybb0/iRjto

Score

N/A

Malware Config

Signatures

Files

af96ed257c6ecdc63344917c6e5767f97db50c7a798720cf2e631f2a73d37d84
.exe windows x86

772a1198393ab48606f7ccc439c6053c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
FindClose
GetLocalTime
GetModuleFileNameA
GetCurrentDirectoryA
TlsAlloc
RemoveDirectoryA
FlushFileBuffers
GetConsoleOutputCP
GetSystemDirectoryA
Sleep
GetSystemTimeAsFileTime
TlsGetValue
CreateFileA
GetLastError
CloseHandle
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
SetStdHandle
SetHandleCount
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA

user32

CreateMenu
RegisterWindowMessageA
TranslateMessage
DeferWindowPos
BeginDeferWindowPos
UnregisterHotKey
LoadCursorA

gdi32

SelectClipRgn
CreateRectRgn
GetPixel
GetStockObject
CreateFontA

Sections

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

772a1198393ab48606f7ccc439c6053c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 304KB - Virtual size: 304KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 15KB - Virtual size: 100KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 304KB - Virtual size: 304KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 15KB - Virtual size: 100KB

.rsrc
Size: 2KB - Virtual size: 1KB