4f62bc0a78728dc3d6d35cdf6771c1407185700f4235768ca32941d3ed4ed5e7

Sharing

Copy URL

Twitter E-mail

General

Target

4f62bc0a78728dc3d6d35cdf6771c1407185700f4235768ca32941d3ed4ed5e7
Size

431KB
MD5

6d08c56a6603c26396f06a90c99c0c15
SHA1

5145f99ac3eebecc6fd11e34b5965ed2e1ae930c
SHA256

4f62bc0a78728dc3d6d35cdf6771c1407185700f4235768ca32941d3ed4ed5e7
SHA512

187439ccd4217b01ff92c7ffb0b4bb8a8116ca9a33de55ad28b6cfae4be521f8ce434bf5f5f488f51d1bc32e6f6c198237e67765c1d85b4b77695bb25470c401
SSDEEP

12288:ma/2anFpagJtRoqt2oFDGcHGjeskqkjQG:ma/tnGQt2oFDG95kL

Score

N/A

Malware Config

Signatures

Files

4f62bc0a78728dc3d6d35cdf6771c1407185700f4235768ca32941d3ed4ed5e7
.exe windows x86

2145b1262a7c8bbc8dbb1a061947c6ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetCurrentThread
lstrcpyW
GetConsoleWindow
InterlockedDecrement
lstrcmpiA
Sleep
GetProcAddress
lstrcatA
HeapCreate
WaitForSingleObject
ExitProcess
FindResourceA
LoadResource
GetLastError
RaiseException
GetStartupInfoW
HeapSetInformation
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetThreadPriority
LCMapStringW
HeapReAlloc
LoadLibraryW
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetThreadPriority
lstrcpyA
SetPriorityClass
GetCurrentProcess
GetPriorityClass
GetModuleHandleA
GetStringTypeW
LoadLibraryA
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
GetStdHandle
WriteFile
GetCurrentThreadId
GetCommandLineA
HeapAlloc
RtlUnwind
LocalFree
DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
EncodePointer

user32

SendDlgItemMessageA
GetDlgItem
DeleteMenu
GetSystemMenu
GetWindowTextLengthA
SendMessageA
BeginDeferWindowPos
KillTimer
SetWindowTextA
wsprintfA
EnumDisplayMonitors
GetWindowLongA
GetWindowTextA
GetClassNameA
GetWindowContextHelpId
GetDlgCtrlID
WindowFromPoint
InvalidateRect
IsIconic
GetDC
ReleaseDC
CreateWindowExA
DestroyWindow
LoadMenuA
LoadBitmapA
GetClientRect
GetWindowRect
UnregisterClassA
DeferWindowPos
EndDeferWindowPos
GetDesktopWindow
GetWindow
SetActiveWindow
DefWindowProcA
GetParent
GetSysColorBrush
RegisterClassExA
SetLayeredWindowAttributes
EndDialog

gdi32

GetObjectA
CreateFontIndirectA
SetTextJustification

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW

ole32

CoCreateInstance
CoUnmarshalInterface
OleIsCurrentClipboard
CoInitializeEx
CoGetInterfaceAndReleaseStream
OleInitialize
CoMarshalInterThreadInterfaceInStream
CoUninitialize

oleaut32

VariantClear
VariantInit

netapi32

NetUserEnum

winmm

mmioDescend

version

GetFileVersionInfoSizeA

shlwapi

StrRChrA

rasapi32

RasDialA

msi

ord40

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2145b1262a7c8bbc8dbb1a061947c6ae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

netapi32

winmm

version

shlwapi

rasapi32

msi

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 239KB - Virtual size: 239KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 239KB - Virtual size: 239KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 9KB - Virtual size: 8KB