5a74c60b2a3942938b3ebce3710bc7ee1dbd0551c1d3f107ec15fd7c8615f83e

Sharing

Copy URL Twitter E-mail

General

Target

5a74c60b2a3942938b3ebce3710bc7ee1dbd0551c1d3f107ec15fd7c8615f83e
Size

102KB
MD5

00f45214860ad31b59d96d3d8bf7bf20
SHA1

f6aee9151036e45f8ec32f188097b366bf2a29ed
SHA256

5a74c60b2a3942938b3ebce3710bc7ee1dbd0551c1d3f107ec15fd7c8615f83e
SHA512

5b8f28ecdb9868d789012204eb065b55069f28c96750d6f5d43e04a718adcd02faa83fb2349805c061575cb2d9a1b6e8c302d849b2312634f5c3295fbba4352c
SSDEEP

1536:/YfUD3W4bqbadxBPwB0Si9XgmlzIZkmXU9nF2I6R7k+jc6Y+QxYIiTVGsuLmMuO:A03W9badTSP2gU9nk7Tjc6YPfiTV8mP

Score

N/A

Malware Config

Signatures

Files

5a74c60b2a3942938b3ebce3710bc7ee1dbd0551c1d3f107ec15fd7c8615f83e
.exe windows x86

decdbdca8341a97360435f9a3dd14981

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
ReadFile
GetCompressedFileSizeA
GetLastError
CloseHandle
WriteFile
CreateFileW
SetStdHandle
WriteConsoleW
SetFilePointer
GetStringTypeW
MultiByteToWideChar
GetProcessHeap
HeapAlloc
CreateFileA
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryW
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize

user32

SetRect
SetUserObjectInformationA
FindWindowA
EnumDisplayMonitors
SetFocus
GetUpdateRect
IsWindow

gdi32

SelectObject
CreateSolidBrush
FloodFill

ole32

CoUninitialize
CoInitialize

oleaut32

VariantInit

oleacc

AccessibleObjectFromEvent

setupapi

SetupDiGetClassDevsA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

decdbdca8341a97360435f9a3dd14981

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

oleacc

setupapi

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 21KB - Virtual size: 28KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 21KB - Virtual size: 28KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 6KB - Virtual size: 6KB