1be5c39f1b26e294ad423f63e23b6748214051297fc058cd5342d3119a251466

Sharing

Copy URL

Twitter E-mail

General

Target

1be5c39f1b26e294ad423f63e23b6748214051297fc058cd5342d3119a251466
Size

282KB
MD5

1bbd74ffbbecf915c000ed831f09f63d
SHA1

3341fbdbd4b9ba6da455e606bad74f2838e6032a
SHA256

1be5c39f1b26e294ad423f63e23b6748214051297fc058cd5342d3119a251466
SHA512

923496b86bb35ac2e0fc91bd6606bfd88ebf3a88211d5dbb590722ef8ad91c79302a3786466ac43dd4960c35560e9f4144c5900692cf8e84ab896c82e8480a38
SSDEEP

3072:s3JIa1KMRLUOU9+RoQNAH+5sD6GzSa5LsjyZoJ/ETiwMoxw0ZLnlNJltM6RQawzG:fiLQ9+Rm+5sOGRsjyZC/Erx3ZfLM

Score

N/A

Malware Config

Signatures

Files

1be5c39f1b26e294ad423f63e23b6748214051297fc058cd5342d3119a251466
.exe windows x86

6cee13a579bb614f29f24d579ca91636

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FlushFileBuffers
GetLocaleInfoA
GetCurrentProcess
GetCurrentThread
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
GetFileAttributesW
VirtualAlloc
GetEnvironmentStrings
CloseHandle
GetLastError
DeviceIoControl
CreateFileA
HeapReAlloc
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
MultiByteToWideChar
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
Sleep
ExitProcess
LoadLibraryW
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
WriteFile
GetModuleFileNameA

user32

DrawFocusRect
IntersectRect
SetScrollPos
IsDlgButtonChecked
SystemParametersInfoA
OemKeyScan
BeginDeferWindowPos
GetFocus
GetDlgItem
GetDC
LoadImageA
BeginPaint
EnumWindows
GetClientRect
SendMessageA
SetActiveWindow
SendMessageW
GetSysColor
CloseClipboard
EmptyClipboard
OpenClipboard

gdi32

SelectObject
GetStockObject
BitBlt
CreateFontIndirectW
SetTextColor
CombineRgn
CreateRectRgn
MoveToEx
CreateEllipticRgn
GetDCPenColor
CreateCompatibleDC

comdlg32

ChooseFontW
FindTextW

advapi32

OpenProcessToken
OpenThreadToken
GetTokenInformation

shell32

ExtractIconExA
SHGetFileInfoA

ole32

CreateStreamOnHGlobal
StgOpenStorage
ReleaseStgMedium
CoCreateGuid
StringFromGUID2

oleaut32

RevokeActiveObject

winmm

mmioSetInfo

pdh

PdhCollectQueryData

rpcrt4

RpcMgmtEpEltInqDone
RpcMgmtEpEltInqBegin
RpcImpersonateClient

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6cee13a579bb614f29f24d579ca91636

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

pdh

rpcrt4

Sections

.text Size: 115KB - Virtual size: 114KB

.text1 Size: 512B - Virtual size: 32B

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 6KB - Virtual size: 14KB

.rdata Size: 6KB - Virtual size: 5KB

.data1 Size: 1KB - Virtual size: 1KB

.trace Size: 3KB - Virtual size: 3KB

.rsrc Size: 102KB - Virtual size: 101KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 115KB - Virtual size: 114KB

.text1
Size: 512B - Virtual size: 32B

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 6KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 5KB

.data1
Size: 1KB - Virtual size: 1KB

.trace
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 102KB - Virtual size: 101KB

.reloc
Size: 9KB - Virtual size: 8KB