410efb1938ab06cf29acbcd24a3eca81c5d6d0c84778997adad1b5f0ecfb455c

Sharing

Copy URL

Twitter E-mail

General

Target

410efb1938ab06cf29acbcd24a3eca81c5d6d0c84778997adad1b5f0ecfb455c
Size

198KB
MD5

40b0769ba2e5d575cdd325b81ffd8792
SHA1

88793e0e6329cbfa02a7f6ad2f80a4d6fa01ff0f
SHA256

410efb1938ab06cf29acbcd24a3eca81c5d6d0c84778997adad1b5f0ecfb455c
SHA512

3d68d9bfc9675e815eaa0ab149e9490cad69d1177c29d402e91a09bbef8a0655ed7cce7e241366f5540f81acf002c878d759bc12255ce73f70856a9f1f324012
SSDEEP

3072:QY3Rr2FCJ3u1wf8yehDfL+5sVErh+BUgzQguHN8E8rREtK:kCJ3upyADfLehrgxfE8rCtK

Score

N/A

Malware Config

Signatures

Files

410efb1938ab06cf29acbcd24a3eca81c5d6d0c84778997adad1b5f0ecfb455c
.exe windows x86

542f2e5d88c0f1f34844352baf76c359

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GlobalAlloc
TerminateProcess
lstrcatA
GetHandleInformation
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
GetCurrentProcess
DuplicateHandle
SetProcessShutdownParameters
CloseHandle
ReadFile
CreateFileW
GetStringTypeW
OutputDebugStringW
FlushFileBuffers
GetCPInfo
lstrlenA
GetNativeSystemInfo
SetProcessAffinityMask
SetProcessWorkingSetSize
ExitProcess
WriteConsoleW
SetStdHandle
HeapFree
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
HeapAlloc
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
LCMapStringW
SetFilePointerEx
ReadConsoleW

user32

GetDCEx
ShowScrollBar
LoadImageA
PeekMessageW

advapi32

InitiateSystemShutdownW
GetUserNameA
LookupPrivilegeNameA
SetSecurityDescriptorControl
CloseEventLog

msimg32

TransparentBlt

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

542f2e5d88c0f1f34844352baf76c359

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

msimg32

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 6KB - Virtual size: 1.0MB

.rsrc Size: 94KB - Virtual size: 93KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 6KB - Virtual size: 1.0MB

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 5KB - Virtual size: 4KB