9cf0c20e1deba40fbb3dfe25fd2a78d3876d6a2ec0e638cad4cac24756752fb4

Sharing

Copy URL Twitter E-mail

General

Target

9cf0c20e1deba40fbb3dfe25fd2a78d3876d6a2ec0e638cad4cac24756752fb4
Size

158KB
MD5

4301ce8f28dcf13ea0f776b17e799800
SHA1

0e17712a3401f5de5c1aaff35491f5ad6a1488e0
SHA256

9cf0c20e1deba40fbb3dfe25fd2a78d3876d6a2ec0e638cad4cac24756752fb4
SHA512

3f3b9913566ffca9b5582a377550f3496fe1cda6538f362824c424a37c834607456d2f89718b00d80fc6999b4406fd196ffe1d1f9a802567d9ab155d888ce6d9
SSDEEP

3072:vjPNXO9C8NdQQS1HdQpLzubL7MpH809k6IaWagsrKd92ih:voVdQnHqfG/Mx7kmKsud

Score

N/A

Malware Config

Signatures

Files

9cf0c20e1deba40fbb3dfe25fd2a78d3876d6a2ec0e638cad4cac24756752fb4
.exe windows x86

cac16d11c7c57925b6a32e47e7f17440

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OffsetRect
DefFrameProcW
GetWindowDC
IsDlgButtonChecked
EnumThreadWindows
SendMessageW
GetKeyboardLayoutNameW
RemoveMenu
GetClipCursor
IsCharAlphaNumericA
DefWindowProcW
GrayStringW
SetWindowLongA
SendNotifyMessageW
GetClassLongW
VkKeyScanW
ShowWindowAsync

ole32

CoGetCurrentProcess
CoInitialize

gdi32

GetTextExtentPointA
Rectangle
SetBitmapBits
GetTextExtentPoint32W
IntersectClipRect
GetLayout

rpcrt4

CreateProxyFromTypeInfo
CreateStubFromTypeInfo

kernel32

DuplicateHandle
lstrcatA
CreateEventW
GlobalAlloc
GetSystemTime
lstrlenA
SetFileAttributesA
CreateMailslotW
VirtualFree
CopyFileW
InitializeCriticalSection
GlobalUnlock
VerifyVersionInfoW
GetThreadLocale
MapViewOfFile
CopyFileA

Exports

Exports

ValidateWidthOld

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oypac
Size: 512B - Virtual size: 453B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jibmed
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cac16d11c7c57925b6a32e47e7f17440

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

gdi32

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 125KB - Virtual size: 125KB

.Agio Size: 4KB - Virtual size: 7KB

.oypac Size: 512B - Virtual size: 453B

.jibmed Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 125KB - Virtual size: 125KB

.Agio
Size: 4KB - Virtual size: 7KB

.oypac
Size: 512B - Virtual size: 453B

.jibmed
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 3KB