38651a6d73335fe8613c78c9858b919d484b0d8c89409175767fced730499444

Sharing

Copy URL

Twitter E-mail

General

Target

38651a6d73335fe8613c78c9858b919d484b0d8c89409175767fced730499444
Size

144KB
MD5

3e906b06ea4ee4955063b15647e80991
SHA1

a89e6526276181e5751c37aca7682ca6fc160d18
SHA256

38651a6d73335fe8613c78c9858b919d484b0d8c89409175767fced730499444
SHA512

5f1b758e2ade1b10193b66f39814488d849491c6a776f32c58df18da623e1bc153d16b6357034f6721de0482255bf231837653d9f64b653f2db74a0a9275424b
SSDEEP

3072:TuA6Xbjbbbbbbmbkbbbbwbbbyqbbbbbbb9bbbbbbnZExXiytUTK4J6BaeJtSzGo:cXbjbbbbbbmYbbbbwbbbDbbbbbbb9bbp

Score

N/A

Malware Config

Signatures

Files

38651a6d73335fe8613c78c9858b919d484b0d8c89409175767fced730499444
.exe windows x86

e125b9dca323e662578f91059169f243

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardConnectW

mscms

GetColorProfileHeader

shell32

ExtractAssociatedIconExW

advapi32

GetTokenInformation
InitializeSecurityDescriptor
InitializeSid
IsTokenRestricted

secur32

DeleteSecurityContext

gdi32

GetCharWidthA
GetFontLanguageInfo
GetTextCharsetInfo
GetCurrentPositionEx
GetCharWidth32W
GetFontData

user32

GetKeyboardLayout
GetMenuContextHelpId
GetCaretBlinkTime
GetDlgItem
LoadKeyboardLayoutW
GetMenuState
GetDoubleClickTime
SetCapture
LoadKeyboardLayoutA
GetWindowLongW
GetPriorityClipboardFormat
EqualRect
DrawIcon
GetClassInfoW
GetClassLongA
GetMenuItemCount
GetRawInputDeviceList
GetMenuStringA
GetRawInputDeviceInfoW
LockWindowUpdate
LockWorkStation

powrprof

CanUserWritePwrScheme

ole32

MkParseDisplayName

kernel32

GetTimeZoneInformation
GetSystemDefaultLCID
GetProfileStringA
VirtualProtect
GetLargePageMinimum
GetProcessHeap
WritePrivateProfileStructW
GetDriveTypeA
EnumSystemLocalesW
EnumResourceTypesA
GetVersion
FindVolumeClose
lstrcatW
GetCommandLineA
LoadLibraryExW
FreeConsole

wininet

FindFirstUrlCacheEntryExW

oleaut32

VarCyFromI2

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT0
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e125b9dca323e662578f91059169f243

Headers

DLL Characteristics

File Characteristics

Imports

winscard

mscms

shell32

advapi32

secur32

gdi32

user32

powrprof

ole32

kernel32

wininet

oleaut32

Sections

.text Size: 88KB - Virtual size: 86KB

.data Size: 12KB - Virtual size: 9KB

.idata Size: 4KB - Virtual size: 1KB

.CRT0 Size: 28KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 736B

.text
Size: 88KB - Virtual size: 86KB

.data
Size: 12KB - Virtual size: 9KB

.idata
Size: 4KB - Virtual size: 1KB

.CRT0
Size: 28KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 736B