c8ec8295ed21e2ec6d47b677dba0ae5cc7344723dbec61f0dd7db35f37b74368

Sharing

Copy URL Twitter E-mail

General

Target

c8ec8295ed21e2ec6d47b677dba0ae5cc7344723dbec61f0dd7db35f37b74368
Size

254KB
MD5

6b7bc26333fbb8b927e3b17bdb8ff6b0
SHA1

068d76cb6bfddc3517937d5b42f88a571e61e18e
SHA256

c8ec8295ed21e2ec6d47b677dba0ae5cc7344723dbec61f0dd7db35f37b74368
SHA512

afac96677cb5a8c8fe2e4f49ee24d064095e764f0aace9b30fe93f92a08d8250f8958eadcd89cd82f923d0f9fba1a1e040a9632507e179e882d656cce25a7e9f
SSDEEP

6144:TbdDzGN31gXBO4cBHAeJr0a1b+VpdXOAsCdABh/j1/:Tp41QBncuIjOns6ABtR

Score

N/A

Malware Config

Signatures

Files

c8ec8295ed21e2ec6d47b677dba0ae5cc7344723dbec61f0dd7db35f37b74368
.exe windows x86

3b7c43f7eb2d2b695540c29561852b92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetLastError
LocalFree
CloseHandle
LocalAlloc
GetProcAddress
CreateFileW
ReadFile
GetModuleHandleW
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetFilePointer
GetFileSize
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer

user32

TranslateMessage
RegisterClassA
ClientToScreen
DestroyWindow
GetMessageA
SetTimer
ScreenToClient
TrackPopupMenu
GetSubMenu
LoadBitmapA
LoadMenuA
LoadIconA
GetClientRect
SendMessageA
BeginPaint
SetDlgItemTextA
GetDC
PtInRect
MessageBoxA
UnregisterClassA
GetWindowLongA
CreateWindowExA
GetDlgItem
DefWindowProcA
GetDesktopWindow
SetWindowPos
DispatchMessageA
GetMenuInfo
MessageBoxW
CloseWindow
LoadCursorA

gdi32

GetTextExtentPoint32A
DeleteObject
SelectObject
GetTextMetricsA
SetTextAlign
TextOutA

ws2_32

WSACleanup
WSAStartup

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum

comctl32

ord17
InitCommonControlsEx

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 219KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b7c43f7eb2d2b695540c29561852b92

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

mpr

comctl32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 219KB - Virtual size: 222KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 219KB - Virtual size: 222KB

.rsrc
Size: 512B - Virtual size: 436B