2d023b31befef307e418f35dccac149540e9b821ccef1630b38fad4773e0b9c3

Sharing

Copy URL

Twitter E-mail

General

Target

2d023b31befef307e418f35dccac149540e9b821ccef1630b38fad4773e0b9c3
Size

284KB
MD5

decf1fbb274d5e4b50ea860d06e8f663
SHA1

35b77da31d99efe2fe70d50bca795a02c9d78641
SHA256

2d023b31befef307e418f35dccac149540e9b821ccef1630b38fad4773e0b9c3
SHA512

79e59b17485ca76064314203c2d14744599ce720ae4357457679660c91c832b731f58a1dc7e999d213dc9034b171352c9e0ebc911328e087788b84d845180507
SSDEEP

6144:HCXKJGn6J1TRjkX1ygbGBrFMBdcmWqAZknig5w/Iug:HKwjkXIxFISmDAMig5wq

Score

N/A

Malware Config

Signatures

Files

2d023b31befef307e418f35dccac149540e9b821ccef1630b38fad4773e0b9c3
.exe windows x86

64019ce1768101d07e91637f59374823

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardControl

user32

ReleaseDC
UnregisterClassA
GetClientRect
SetTimer
PostMessageW
SetWindowTextW
MoveWindow
SetActiveWindow
DestroyMenu
SetWindowLongW
SetWindowPos
GetActiveWindow
LoadIconA
MessageBeep
CreateWindowExA
DestroyIcon
ClientToScreen
InflateRect
GetSubMenu
GetMenuStringW
OffsetRect
DestroyWindow
CreateWindowExW
GetMenu
LoadStringW
GetCursorPos
SetCapture
PtInRect
TrackPopupMenu
ReleaseCapture
SetMenuItemInfoA
DefWindowProcW
DrawFocusRect
RegisterClassW
SendMessageW

kernel32

GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapReAlloc
HeapAlloc
InitializeCriticalSection
LoadLibraryExA
FreeLibrary
SetConsoleCtrlHandler
OutputDebugStringA
Sleep
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
LeaveCriticalSection
VirtualQuery
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
VirtualFree
GetEnvironmentStrings
VirtualAlloc
GetTickCount
GetCommandLineA
GetVersionExA
GetEnvironmentStringsW
GetCurrentThread
GetLastError
GetProcAddress
LoadLibraryW
GetModuleHandleW
WideCharToMultiByte
CloseHandle
lstrlenW
GetVersionExW
GetModuleFileNameW
InterlockedExchange
EnterCriticalSection
GetStdHandle
InterlockedIncrement
ExitProcess
GetModuleHandleA
IsDebuggerPresent
CompareStringW
CompareStringA
RaiseException
SetEnvironmentVariableA
SetHandleCount
GetCommandLineW
HeapCreate
HeapDestroy
DeleteCriticalSection
GetStartupInfoA
RtlUnwind
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
GetCurrentThreadId
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetFileType

gdi32

CreateDIBitmap

advapi32

RegCreateKeyExW

oleaut32

SafeArrayCreate

ole32

OleCreate
CoInitialize
CoUninitialize

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64019ce1768101d07e91637f59374823

Headers

DLL Characteristics

File Characteristics

Imports

winscard

user32

kernel32

gdi32

advapi32

oleaut32

ole32

Sections

.text Size: 253KB - Virtual size: 253KB

.data Size: 29KB - Virtual size: 28KB

.rsrc Size: 1024B - Virtual size: 704B

.text
Size: 253KB - Virtual size: 253KB

.data
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 1024B - Virtual size: 704B