42cebbf5a666de445fc8676974b6242badd25947f27940bfac1a1194b3dd6513

Sharing

Copy URL Twitter E-mail

General

Target

42cebbf5a666de445fc8676974b6242badd25947f27940bfac1a1194b3dd6513
Size

170KB
MD5

ee7a8b5ca2bf59653b932df171fecd96
SHA1

9db06b1a44c2987e633e98afb081db83e4fc002f
SHA256

42cebbf5a666de445fc8676974b6242badd25947f27940bfac1a1194b3dd6513
SHA512

51ce48820a93a0fc033e90c5e1e10de11091dbb867a8010f2839fa3ac5883ce7b9030e6bb946f9e7944a7b8e1930cf8459535dfff833cd51434f4c36fb757ed2
SSDEEP

3072:GUQMxnQxdVbPmbhahKDEnng//RW4xKfAfscZraVFWZFTynuEY20+0Oiz6GMXhgP:GUQqnIbVhWFRWEKfasgAIfe4Oiz6GMXl

Score

N/A

Malware Config

Signatures

Files

42cebbf5a666de445fc8676974b6242badd25947f27940bfac1a1194b3dd6513
.exe windows x86

68af57df7d86746b3e257e9ddea99011

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetStringTypeExW
GetTimeZoneInformation
lstrlenW
SetThreadLocale
GetFileAttributesExA
GetLocaleInfoA
DeleteFileW
CloseHandle
GetVersionExA
GlobalReAlloc
GetSystemTimeAsFileTime
GetExitCodeThread
FindNextChangeNotification
GetFileSize

Exports

Exports

GetOptionOriginal
IsValue
CopyKeyboardExA
GlobalTimerA
InsertPointerW
GenerateObjectExW
FindProviderEx
FormatWidthNew
FreeSystemOriginal
DecrementListOld
InstallPointNew
IsValidDataOriginal
IsKeyboardOld
GlobalMemory
CopyAppNameNew
EnumSemaphoreEx
SendKeyboardEx
ModifyPointerW
KeyNameA
FormatPointerEx
LoadSemaphoreExW
CancelHeightW
CrtList
IsNotAppNameExA
CopyTimerW
DecrementSection
CopyObjectEx
CopyPenOriginal
RtlScreenExW
IsNotTextNew
KeyNameExA
CallListExW

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Eh0887
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nus
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 1024B - Virtual size: 519B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68af57df7d86746b3e257e9ddea99011

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 134KB

.On59 Size: 512B - Virtual size: 398B

.Eh0887 Size: 512B - Virtual size: 28B

.Nus Size: 512B - Virtual size: 165B

.Re82 Size: 23KB - Virtual size: 26KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 1024B - Virtual size: 519B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 164B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 135KB - Virtual size: 134KB

.On59
Size: 512B - Virtual size: 398B

.Eh0887
Size: 512B - Virtual size: 28B

.Nus
Size: 512B - Virtual size: 165B

.Re82
Size: 23KB - Virtual size: 26KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 1024B - Virtual size: 519B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 164B

.reloc
Size: 5KB - Virtual size: 4KB