1d9669fda387ad0d238d4dfe98fd35dedeaf6792c66705e701b747cab73aab13

Sharing

Copy URL Twitter E-mail

General

Target

1d9669fda387ad0d238d4dfe98fd35dedeaf6792c66705e701b747cab73aab13
Size

224KB
MD5

98a959803efe787b05c388f81cf6197d
SHA1

90ca7998c051474fc7dfe70029f5f19344c01be6
SHA256

1d9669fda387ad0d238d4dfe98fd35dedeaf6792c66705e701b747cab73aab13
SHA512

9a9930e1ee0ec0ec19aa548b574af8026d40b0c183235613ad7fec238462855bd1468c95769805e038519696c9ec20b74a84f8a9e6ecf989e18907a0dba4243c
SSDEEP

6144:qNMQH0JSWK2NzZtAeL1GLjU5R7L/yQBG5dL2/hSq:qTHoSWK2Ndqe5sjIBVYh2/hn

Score

N/A

Malware Config

Signatures

Files

1d9669fda387ad0d238d4dfe98fd35dedeaf6792c66705e701b747cab73aab13
.exe windows x86

430a109ec95fc6250e6f45bed885882b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetActiveWindow
FillRect
GetUpdateRgn
DestroyMenu
GetWindowThreadProcessId
GetKeyState
ScrollDC
GetKeyboardLayoutList
RegisterClassExW
IsWindow
GetWindowLongW
GetClipboardData
MonitorFromWindow
GetMessageTime
GetScrollPos
GetScrollRange
PostQuitMessage
SetCursorPos
HideCaret
RegisterClipboardFormatW
GetSysColor
GetSystemMenu
GetCursorPos
GetSubMenu
GetKeyboardLayout
GetWindowRect
DestroyCaret
SetScrollRange
GetWindowPlacement
GetClassNameW
InvalidateRgn
DispatchMessageW
CloseClipboard
GetDesktopWindow

gdi32

CreateICW
SetTextColor
GetBkColor
SetBkColor
CreatePen
DeleteMetaFile
GetClipBox
Polygon
GetBitmapBits
SelectClipRgn
Arc
LPtoDP
CreateBrushIndirect
SaveDC
GetTextColor
CreateDIBPatternBrush
GetCharWidthA
MoveToEx
CreateRoundRectRgn
GetTextAlign
GdiComment
SelectObject
EnumFontsW
CreateSolidBrush
GetWindowExtEx
ExtEscape
GetTextExtentPointW
GetTextFaceW
InvertRgn
IntersectClipRect
CreateBitmap
SetTextAlign

certperf

_LDscale
_FInf
_LDtest
_Stod
_Xbig
_Stof
_LXbig
_FSnan
_Wcrtomb
_Getctype

ole32

ProgIDFromCLSID
OleLoadFromStream
StringFromGUID2
OleQueryCreateFromData
OleSave
WriteClassStg
StgOpenStorageOnILockBytes
OleFlushClipboard
CreateBindCtx
OleQueryLinkFromData
OleCreateMenuDescriptor
CreateOleAdviseHolder

ntdll

RtlAddAce
RtlEncodePointer
NtSetInformationThread
RtlCreateTimer
RtlExitUserThread
NtOpenEventPair
RtlCompareString

kernel32

InterlockedExchange
GetCurrentThreadId
GetPriorityClass
GetProcAddress
GetLocalTime
LoadLibraryA
LockResource
GetACP
GetTickCount
LoadLibraryW
VirtualAllocEx
FindFirstFileW
GetModuleHandleW
InterlockedDecrement
CreateFileW
LocalAlloc
FindResourceW
CloseHandle
GetVersionExA
GetLocaleInfoW
SleepEx
IsValidCodePage
MulDiv
GetUserDefaultLCID
WriteFile
EnumCalendarInfoW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

430a109ec95fc6250e6f45bed885882b

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

certperf

ole32

ntdll

kernel32

Sections

.text Size: 59KB - Virtual size: 59KB

.data Size: 137KB - Virtual size: 136KB

.rsrc Size: 27KB - Virtual size: 28KB

.text
Size: 59KB - Virtual size: 59KB

.data
Size: 137KB - Virtual size: 136KB

.rsrc
Size: 27KB - Virtual size: 28KB