dbe42a33fef361cfaf36cb32083c866b0336a323087928688dcb076e09ea0907

Sharing

Copy URL Twitter E-mail

General

Target

dbe42a33fef361cfaf36cb32083c866b0336a323087928688dcb076e09ea0907
Size

345KB
MD5

6b201fe1eb4e2c0b8ad66c63a77d1042
SHA1

181c2cc7a2e39d1482a50a9889f0888f727ef705
SHA256

dbe42a33fef361cfaf36cb32083c866b0336a323087928688dcb076e09ea0907
SHA512

137a0cd7fd78f063007b5150577b48d6c2c0df991fd5b63a6ce6e40025693b983f815d1090d6aa561d2a2c94be48a737feb390b786760ae2b2d8f482b51f45b7
SSDEEP

6144:5RR2+/j7aV7FLNLjDlUEQ1RzDXIM2pBNABwAi+Od49UFQjZu6sQFlAd1oJR:jR2+aP19UEQzDXn2rFX4UmRs5ER

Score

N/A

Malware Config

Signatures

Files

dbe42a33fef361cfaf36cb32083c866b0336a323087928688dcb076e09ea0907
.exe windows x86

7f80238f0b1d7524d46301b518e3e717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

SetStdHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetStringTypeW
LCMapStringW
ReadFile
MultiByteToWideChar
HeapSize
IsValidCodePage
GetOEMCP
GetProcAddress
FreeLibrary
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetFileType
SetHandleCount
GetModuleFileNameW
GetStdHandle
WriteFile
CloseHandle
WriteConsoleW
GetLastError
GetConsoleWindow
HeapCreate
GetACP
Sleep
GetCurrentProcess
TerminateProcess
GetCPInfo
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleA
GetSystemTimeAsFileTime
LoadLibraryA
UnhandledExceptionFilter
LoadLibraryW
RaiseException
RtlUnwind
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateFileW

user32

LoadBitmapA
SetWindowLongA
GetWindowLongA
GetForegroundWindow
IsWindowVisible
GetWindow
SetActiveWindow
GetWindowTextA
RegisterClipboardFormatW
GetDlgItem
GetWindowRect
ScreenToClient
GetDC
MoveWindow
DialogBoxParamA
EndDialog
CheckRadioButton
GetParent
SetWindowTextA
GetAncestor
MessageBoxA
GetClassNameW
FindWindowA
SetMenu
OpenClipboard
EmptyClipboard
CopyImage
SetClipboardData
CloseClipboard
BeginPaint
EndPaint
SendMessageA
GetClientRect
CreateWindowExA

gdi32

CreatePen
SelectObject
MoveToEx
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
CreatePatternBrush
DeleteObject
ExtCreatePen

winspool.drv

OpenPrinterW

comdlg32

GetOpenFileNameA

shell32

SHParseDisplayName

comctl32

ImageList_Create
ord17

setupapi

SetupCreateDiskSpaceListA

d3d9

Direct3DCreate9

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f80238f0b1d7524d46301b518e3e717

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

shell32

comctl32

setupapi

d3d9

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 5KB - Virtual size: 12KB

.bdata Size: 199KB - Virtual size: 199KB

.udata Size: 18KB - Virtual size: 17KB

.ddata Size: 4KB - Virtual size: 4KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 5KB - Virtual size: 12KB

.bdata
Size: 199KB - Virtual size: 199KB

.udata
Size: 18KB - Virtual size: 17KB

.ddata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 7KB - Virtual size: 6KB