efffb7662a5c10660bfcabb4e595556b715d93c7eb7acdcf3f6c480e9c9ffd0c

Sharing

Copy URL Twitter E-mail

General

Target

efffb7662a5c10660bfcabb4e595556b715d93c7eb7acdcf3f6c480e9c9ffd0c
Size

807KB
MD5

b6a60f157cb02bb95011a31fa704da04
SHA1

c21dab4cc847e238bf6161a552366c543645ce4c
SHA256

efffb7662a5c10660bfcabb4e595556b715d93c7eb7acdcf3f6c480e9c9ffd0c
SHA512

b431c1791347025d6e64772fc66bba43f5e18bf184ebddc410cafd23ac3e73d54a58b62fe7747ca80a5e5ec2031b53837a1cb8af2f099cf091d34d4ebc2007ee
SSDEEP

12288:ZBDFg109Lq32/m90+sOX04QGFLXWXJS62pRRZDUc/gx:rSSq3k+sY04Q4VPwc/

Score

N/A

Malware Config

Signatures

Files

efffb7662a5c10660bfcabb4e595556b715d93c7eb7acdcf3f6c480e9c9ffd0c
.exe windows x86

8ec64e5cba02d9668f172a4072881498

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
QueryPerformanceCounter
GetModuleFileNameA
InitializeCriticalSection
lstrcmpiW
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
HeapFree
HeapDestroy
LoadLibraryA
GetCurrentProcess
ReadFile
GetSystemTimeAsFileTime
InterlockedExchange
GetProcessHeap
LocalAlloc
InterlockedIncrement
HeapFree
VirtualProtect
InterlockedExchange
UnhandledExceptionFilter
GetProcessHeap
GetModuleFileNameW
lstrcmpiW
GetSystemTimeAsFileTime
HeapDestroy
EnterCriticalSection
CloseHandle
ReadFile
GetModuleHandleA
LeaveCriticalSection
VirtualProtect
GetCurrentProcessId
GetTickCount
UnhandledExceptionFilter
Sleep
QueryPerformanceCounter
GetVersionExA
LoadLibraryA
Sleep
GetProcessHeap
UnhandledExceptionFilter
InterlockedCompareExchange
GetModuleHandleW
VirtualProtect
GetLastError
GetTickCount
GetTickCount
LoadLibraryW
DisableThreadLibraryCalls
InterlockedDecrement
GetVersionExA
GetProcessHeap
InitializeCriticalSection
CreateThread
HeapFree
InterlockedCompareExchange
lstrcmpiW
GetCurrentThreadId
CreateThread
UnhandledExceptionFilter
CloseHandle
InterlockedIncrement
LocalFree
GetModuleFileNameA
InterlockedDecrement
LeaveCriticalSection
VirtualProtect
GetProcessHeap
lstrlenA
GetLastError
LoadLibraryW
UnhandledExceptionFilter
CreateThread
QueryPerformanceCounter
GetModuleHandleA
CloseHandle
CreateEventW
CreateThread
GetSystemTimeAsFileTime
lstrlenA
ReadFile
GetModuleHandleW
GetModuleHandleA
SetLastError
GetCurrentProcessId
DeleteCriticalSection
CloseHandle
lstrcmpiW
LocalFree
QueryPerformanceCounter
GetCurrentThreadId
VirtualProtect
LocalFree
GetProcessHeap
GetCurrentProcessId
GetVersionExA
GetLastError

user32

SendMessageW
CharNextW
GetWindowLongW
SendMessageW
PeekMessageW
wsprintfA
GetClientRect
GetSystemMetrics
SetFocus
GetDlgItem
DestroyWindow
MessageBoxW
PeekMessageW
GetFocus
GetParent
CreateWindowExW
DialogBoxParamW
KillTimer
GetSystemMetrics
SetWindowPos
BeginPaint
MessageBoxW
EndDialog
GetWindowLongW
CharNextW
DispatchMessageW
GetFocus
CharNextW
SendMessageW
IsDlgButtonChecked
GetWindowLongW
TranslateMessage
ShowWindow
GetParent
CharNextW
GetSysColor
DestroyWindow
GetDlgItem
PostMessageW
wsprintfA
DestroyWindow
BeginPaint
GetSystemMetrics
SetWindowPos
SetFocus
TranslateMessage
GetDlgItem
wsprintfA
PeekMessageW
SetWindowTextW
DestroyWindow
IsDlgButtonChecked
GetClientRect
SetTimer
LoadStringW
GetWindowLongW
DefWindowProcW
GetClientRect
SetWindowLongW
ReleaseDC
SendDlgItemMessageW
CreateWindowExW
SetTimer
SetWindowLongW
GetFocus
GetDC
SetForegroundWindow
wsprintfA
MessageBoxW
wsprintfA
IsWindow
GetSystemMetrics
BeginPaint
DefWindowProcW
wsprintfA
CreateWindowExW
BeginPaint
PostQuitMessage
SetForegroundWindow
SetFocus
InvalidateRect
EndPaint
GetWindowLongW
InvalidateRect
GetWindowLongW
EndDialog
SetWindowTextW
GetWindowLongW
SetWindowTextW
CreateWindowExW
KillTimer
SetForegroundWindow
GetFocus
ReleaseDC
SetWindowPos
SetWindowTextW
KillTimer
BeginPaint
TranslateMessage
SetCursor
SetWindowPos
GetWindowLongW
GetFocus
IsWindow
SetWindowLongW
GetDesktopWindow
LoadIconW

Sections

.text
Size: 718KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ec64e5cba02d9668f172a4072881498

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 718KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 718KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB