9dd31faab6a4cc4607fdb8d6114cab8cf8869c63dfa400bbc9ebbf52f3ba81db

Sharing

Copy URL Twitter E-mail

General

Target

9dd31faab6a4cc4607fdb8d6114cab8cf8869c63dfa400bbc9ebbf52f3ba81db
Size

308KB
MD5

21aedaff383f6857c88f1e7872bed6b3
SHA1

306c01a23ecb26d42f964f2d4664e1dee8c8e185
SHA256

9dd31faab6a4cc4607fdb8d6114cab8cf8869c63dfa400bbc9ebbf52f3ba81db
SHA512

382c618821f5016cdd4d8cb4f3d26d21fa95eaba42b602eefbfd36d8645bf0375a5fe596de109eb28c1de20d16de0f6156e4577c9cd45200dc9544363820395d
SSDEEP

3072:RyHbG0woiL76lAfP99094wTqPrfNRJrvvP99094wTqPrfNRJrvKXvkG23o7VUICs:ka0wDzfPz7wTwrf7lvPz7wTwrf7lLIE6

Score

N/A

Malware Config

Signatures

Files

9dd31faab6a4cc4607fdb8d6114cab8cf8869c63dfa400bbc9ebbf52f3ba81db
.exe windows x86

4ab9e442863b099964838b5eb857f922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GetProcAddress
GetModuleFileNameW
GetPrivateProfileStringW
CloseHandle
GetTickCount
CreateProcessW
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapReAlloc
HeapAlloc
GetOEMCP
GetSystemInfo
VirtualProtect
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
DeleteCriticalSection
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
HeapSize
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
InitializeCriticalSection
RaiseException
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
GetModuleFileNameA
GetStartupInfoW
GetModuleHandleA
HeapFree
RtlUnwind
ExitProcess
LocalFree
GetLastError
GetVersionExA
GetSystemTimeAsFileTime

user32

GetSystemMetrics
UpdateLayeredWindow
GetWindowDC
GetParent
GetClientRect
LoadStringW
LoadAcceleratorsW
RegisterWindowMessageW
GetMessageW
SetTimer
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
GetDesktopWindow
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
DestroyWindow
DialogBoxParamW
EndDialog
BeginPaint
EndPaint
PostQuitMessage
SendMessageW
SetWindowLongW
GetWindowLongW
DefWindowProcW
RegisterClassExW
CreateWindowExW
SetWindowPos
GetWindowRect
EqualRect
GetDC
ReleaseDC

gdi32

CreateDIBSection
SelectObject
GetDeviceCaps
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC

ole32

OleSetContainedObject
CoLoadLibrary
OleCreate
OleDraw
CoInitialize

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
GetErrorInfo

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ab9e442863b099964838b5eb857f922

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 180KB - Virtual size: 177KB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 180KB - Virtual size: 177KB

.rrdata
Size: 68KB - Virtual size: 68KB