a21ee46976b109ff6e7783d1cebe7c024024c63bdef7caf19961a3ed371b1db2

General

Target

a21ee46976b109ff6e7783d1cebe7c024024c63bdef7caf19961a3ed371b1db2
Size

65KB
MD5

f46d7a3cfa62bb20a2074f1ce5347534
SHA1

037f0d99aa60d142157ef587465c7ea7ba3a8e16
SHA256

a21ee46976b109ff6e7783d1cebe7c024024c63bdef7caf19961a3ed371b1db2
SHA512

fa82d20ad81d53a926a1f25ecbb51a7533ec781d513af1c1a047497b2856d0e75d5c67ea65c89690ee427ab86d9f5e1612e3ccd79104e1611de1a6b2aae767e9
SSDEEP

1536:ybZGQZo0Brub7ZRGowqEbqciskWSnhpAU0OG1l:mxZo0leRGPAs+hd

Score

N/A

Malware Config

Signatures

Files

a21ee46976b109ff6e7783d1cebe7c024024c63bdef7caf19961a3ed371b1db2
.exe windows x86

05c3846653c87c904e597e6b534c3adf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
SetFilePointer
GetFileSizeEx
VirtualProtect
GetModuleFileNameA
FindFirstFileW
SystemTimeToFileTime
GetFileAttributesA
EnterCriticalSection
HeapFree
GetUserDefaultUILanguage
VirtualAlloc
GetSystemTimeAsFileTime
lstrcmpiA
CreateMutexW
HeapReAlloc
LeaveCriticalSection
ResetEvent
lstrcpyW
WideCharToMultiByte
GetFileSize
ExpandEnvironmentStringsW

user32

ToUnicode
FindWindowExA
GetMessageA
GetDlgItem
GetDlgItemTextA
PeekMessageA
SetThreadDesktop
GetKeyboardState
GetWindowThreadProcessId
GetCursorPos
GetForegroundWindow
GetClassNameA
OpenDesktopA
OpenWindowStationA
CharLowerBuffA
LoadCursorA
CloseWindowStation
GetWindowLongA
SetProcessWindowStation
DrawIcon

advapi32

CryptReleaseContext
RegQueryValueExA
CryptGetHashParam
DuplicateTokenEx
GetUserNameW
RegEnumKeyExA
RegCloseKey
CryptCreateHash
CryptHashData
CryptAcquireContextW
RegCreateKeyExA
RegDeleteValueA

shlwapi

StrCmpNIA
wvnsprintfW
wnsprintfW
PathFindFileNameW
PathMatchSpecW
StrCmpNIW
SHDeleteKeyA
StrStrW
wnsprintfA
PathRemoveFileSpecW

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05c3846653c87c904e597e6b534c3adf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 512B - Virtual size: 16KB

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 512B - Virtual size: 16KB