9e49b94ab31765babb0e56c2a5ed04e9d8d14adaa6462570631a2654fe3ae0fc

Sharing

Copy URL Twitter E-mail

General

Target

9e49b94ab31765babb0e56c2a5ed04e9d8d14adaa6462570631a2654fe3ae0fc
Size

86KB
MD5

f83f6b793b03d19878211ea57072f384
SHA1

707b275c118840c68c982164f8798d427f6eb1ae
SHA256

9e49b94ab31765babb0e56c2a5ed04e9d8d14adaa6462570631a2654fe3ae0fc
SHA512

415f303f4f303b9c984d19d1a9384832ae6f1e4b7f846262d005adc81fddf922db5383243e5a301824dfd58155e2c890eedcc17a2efe07bb2c55b16a05a078d9
SSDEEP

1536:Qn2spfL1KodCqB0Mw+hUZu9SP68K2J3Cv9IwkcXImOto4tUkrxV1w54X:Q2UBKodXWMtC+SP6n2ViXImOto4tUGM4

Score

N/A

Malware Config

Signatures

Files

9e49b94ab31765babb0e56c2a5ed04e9d8d14adaa6462570631a2654fe3ae0fc
.exe windows x86

7f0d0129c5f984cd361bbbea834b476e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
MultiByteToWideChar
lstrlenA
GetLastError
CreateMutexA
VirtualAlloc
VirtualFree
GetCommandLineA
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateProcessA
lstrcatA
GetModuleFileNameA
GetVolumeInformationA
FindFirstVolumeA
GetVersionExA
CreateFileW
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
GetStringTypeW
LCMapStringW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
Sleep
HeapCreate
ExitProcess
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
EncodePointer
WideCharToMultiByte
RaiseException
VirtualProtect
GetProcAddress
GetModuleHandleW
GetSystemInfo
VirtualQuery
RtlUnwind
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
FlushFileBuffers

user32

UpdateWindow
DefWindowProcA
GetWindowLongA
GetMessageA
TranslateMessage
PostQuitMessage
ShowWindow
LoadIconA
SetWindowPos
GetWindowRect
GetClientRect
SetTimer
KillTimer
SetWindowLongA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetSystemMetrics
DispatchMessageA

ole32

OleInitialize
CoCreateInstance
OleUninitialize

oleaut32

SysFreeString
VariantClear
SysAllocStringLen
SysAllocString

shlwapi

StrStrA
StrStrIA
PathQuoteSpacesA

urlmon

CoInternetSetFeatureEnabled

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
FindCloseUrlCache
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
InternetReadFile
InternetQueryDataAvailable

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f0d0129c5f984cd361bbbea834b476e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

shlwapi

urlmon

wininet

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 148KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 148KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 7KB