5d1f46d751c9a9f630af70957830e510e4ba5be5c5774712573db5ff3edb1a38

Sharing

Copy URL

Twitter E-mail

General

Target

5d1f46d751c9a9f630af70957830e510e4ba5be5c5774712573db5ff3edb1a38
Size

707KB
MD5

cb6de4d7079eb79e8f80c2013533a9b3
SHA1

387c0fae3883e3bccdc39b1874de397fcccb76e9
SHA256

5d1f46d751c9a9f630af70957830e510e4ba5be5c5774712573db5ff3edb1a38
SHA512

da33348c09b4db7aa139b770483c3945bda6be31468f7c183b0fa6dd893acc5923a23fdb13fafefa2b90d573682b0570eb7dd4675f15d6b96133fe2f5e4ef4eb
SSDEEP

12288:KmC7+pqx0NH8fOMYYPyi8NFpTfJ/4/xPCrJJbp6sdUBeO0CvPok+z5usW:KmJ60uQi89TK/o3bpkBeO0CLns

Score

N/A

Malware Config

Signatures

Files

5d1f46d751c9a9f630af70957830e510e4ba5be5c5774712573db5ff3edb1a38
.exe windows x86

6c2eb2953718e4f01e2379b09e2d53ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
SetStdHandle
SetFileAttributesW
GetLocalTime
GetProcAddress
CreateFileW
SetSystemPowerState
Sleep
LoadLibraryW
CreateProcessW
GetCommandLineW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetFileType
WriteConsoleW
GetStdHandle
GetProcessHeap
GetCurrentThreadId
SetLastError
HeapAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError

user32

DefWindowProcW
SetWindowsHookExW
CreateWindowExW
GetActiveWindow
ReleaseDC
AppendMenuW
GetWindowLongW
IsDialogMessageW
GetClassInfoExW
EnumWindows
CallNextHookEx
PostMessageW
FillRect
TrackPopupMenu
DrawFrameControl

gdi32

GetDeviceCaps
SetAbortProc
SetRectRgn
AbortDoc
EndDoc
CombineRgn

ole32

CoCreateInstance
OleInitialize
OleUninitialize
CoInitialize
OleCreate
CoUninitialize

advapi32

RegCloseKey
ControlService
RegisterServiceCtrlHandlerW
RegOpenKeyExW
FreeSid
SetEntriesInAclW
SetServiceStatus
AllocateAndInitializeSid
QueryServiceStatus
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegDeleteKeyW
InitializeSecurityDescriptor
RegQueryValueExW
RegCreateKeyExW
OpenServiceW
StartServiceCtrlDispatcherW
OpenSCManagerW
OpenThreadToken
OpenProcessToken
CreateServiceW

wsnmp32

ord603
ord602
ord100
ord202
ord901
ord102
ord320
ord900
ord104
ord222
ord402
ord221
ord503
ord106
ord502
ord401
ord504
ord206
ord302
ord107
ord604
ord103
ord205
ord120
ord606
ord301
ord600
ord500
ord501
ord400
ord220
ord601
ord605
ord101
ord105
ord203
ord201
ord300
ord200
ord204

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c2eb2953718e4f01e2379b09e2d53ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

advapi32

wsnmp32

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 5KB - Virtual size: 38KB

.rsrc Size: 462KB - Virtual size: 462KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 5KB - Virtual size: 38KB

.rsrc
Size: 462KB - Virtual size: 462KB