d58693f8a4886a2d9cbf6be7a0b583fd4a401bc60b415e24b814968d4f2a8ad4

Sharing

Copy URL

Twitter E-mail

General

Target

d58693f8a4886a2d9cbf6be7a0b583fd4a401bc60b415e24b814968d4f2a8ad4
Size

422KB
MD5

4bdb61bc08b18fbab41e6294bffc7f04
SHA1

d7e6c0f60bd6397a408e4fb442504383d67e5484
SHA256

d58693f8a4886a2d9cbf6be7a0b583fd4a401bc60b415e24b814968d4f2a8ad4
SHA512

824efd2c464d20978285c565382e3ea2d7cb583742dd969426d2cf4bc25be1e040fe000d9d9d532a4aaad26d3b8afdcc44b23db3006620aa6aa4752852db9024
SSDEEP

12288:qw98/UQNYB2vzenVjVEN7XOa4FfklfQm9L+xe:hLyYB2vzenVVENdCMl79p

Score

N/A

Malware Config

Signatures

Files

d58693f8a4886a2d9cbf6be7a0b583fd4a401bc60b415e24b814968d4f2a8ad4
.exe windows x86

63ddbb003439bbe5e99dc126573a3f7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
accept
WSACancelBlockingCall
closesocket
WSAUnhookBlockingHook

kernel32

HeapSize
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStdHandle
WriteFile
RtlUnwind
EnterCriticalSection
GetCPInfo
DeleteCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsSetValue
TlsAlloc
GetModuleHandleW
RaiseException
HeapAlloc
HeapFree
GetStartupInfoA
GetSystemTimeAsFileTime
GetOEMCP
IsValidCodePage
CompareStringA
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
lstrlenA
AddAtomW
LoadLibraryA
FlushFileBuffers
UnlockFile
GetModuleFileNameA
DuplicateHandle
FreeConsole
CreateToolhelp32Snapshot
FreeEnvironmentStringsA
CreateMutexA
GetLastError
IsBadWritePtr
GetCommandLineA
TerminateThread
GetCalendarInfoA
FlushInstructionCache
ReadProcessMemory
GenerateConsoleCtrlEvent
GetModuleFileNameW
lstrlenW
WriteProcessMemory
CreateFiber
GetACP
FreeLibrary
FindCloseChangeNotification
GetCurrentProcess
IsDebuggerPresent
TlsFree
AllocateUserPhysicalPages
GetModuleHandleA
FreeUserPhysicalPages
lstrcmpA
lstrcmpiA
DisableThreadLibraryCalls
Sleep
IsBadStringPtrW
ConvertDefaultLocale
TerminateProcess
lstrcatA
FlushConsoleInputBuffer
lstrcpyA
FreeEnvironmentStringsW
TlsGetValue
CreateTimerQueue
DebugActiveProcess
GetProcAddress
FindResourceExW
ExitProcess
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
LeaveCriticalSection

user32

ToAsciiEx
ShowCaret
ShowScrollBar
DrawAnimatedRects
DestroyCursor
SetWindowsHookW
DrawMenuBar
GetAncestor
AllowSetForegroundWindow
GetClientRect
ShowOwnedPopups
GetCapture
DrawCaption
SetWindowsHookExA
DestroyIcon
ShowCursor
MessageBoxW
WindowFromDC
GetAltTabInfoW
TrackPopupMenu
AnimateWindow
EnableMenuItem
GetClassNameA
FrameRect
UnhookWindowsHook
DlgDirListComboBoxA
AttachThreadInput
ValidateRgn
WaitForInputIdle
DrawIcon
SetWindowTextA
SystemParametersInfoA
DragObject
GetAsyncKeyState
GetAltTabInfoA
EndDeferWindowPos
GetClassLongW
SetWindowWord
TabbedTextOutW
DestroyCaret
GetCaretPos
EnumClipboardFormats
VkKeyScanA
DrawFocusRect
ActivateKeyboardLayout
GetClassLongA
SetWindowsHookExW
UnhookWindowsHookEx
DlgDirSelectExW
GetClipboardData
MessageBoxA
FreeDDElParam

gdi32

GetLogColorSpaceW
GetNearestPaletteIndex
RemoveFontResourceExA
GetMiterLimit
CloseMetaFile
OffsetWindowOrgEx
WidenPath
MaskBlt
SetTextColor
UnrealizeObject
GetRgnBox
CreateEnhMetaFileW
GetTextFaceW
CreateHalftonePalette
GetStockObject
GetMetaFileBitsEx
GetViewportOrgEx
CheckColorsInGamut
SetROP2
GetNearestColor
GetROP2
GetObjectA
SetMapperFlags
SetColorSpace
CreatePatternBrush
PolyBezier
RemoveFontResourceA
UpdateICMRegKeyA
CreatePolygonRgn
SetDCBrushColor
CreateDiscardableBitmap
SetWindowExtEx
SetMetaRgn
GetICMProfileA
CopyMetaFileW
GetStretchBltMode
GetSystemPaletteEntries
GetTextExtentExPointI
CloseFigure
SetMiterLimit
LPtoDP
GetICMProfileW
PolyBezierTo
GetPixelFormat
RoundRect
ColorMatchToTarget
SaveDC
GetPixel
SetArcDirection
GetViewportExtEx
MoveToEx
SetTextCharacterExtra
GetLayout
IntersectClipRect
GetPath
SetSystemPaletteUse
SelectPalette
SelectClipPath
SetWindowOrgEx
PolyDraw
PlayEnhMetaFile
GetPolyFillMode
GetKerningPairsA
SetPixel
SetRectRgn
CreateBitmap
GetKerningPairsW
SelectClipRgn
SetStretchBltMode
GetRandomRgn
ColorCorrectPalette

shell32

SHGetFileInfoA

ole32

CoInitialize

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63ddbb003439bbe5e99dc126573a3f7c

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

shell32

ole32

Sections

.text Size: 109KB - Virtual size: 109KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 260KB - Virtual size: 260KB

.text
Size: 109KB - Virtual size: 109KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 260KB - Virtual size: 260KB