1b50137a1017c7f4ec0850549ff87b293e391b97d84531bf307a08b479bc9800

Sharing

Copy URL Twitter E-mail

General

Target

1b50137a1017c7f4ec0850549ff87b293e391b97d84531bf307a08b479bc9800
Size

242KB
MD5

64fceacc840d572204f3d8003cf6a320
SHA1

cf3c850fecaa0291108785e82b00430e7c9964da
SHA256

1b50137a1017c7f4ec0850549ff87b293e391b97d84531bf307a08b479bc9800
SHA512

d26046824df152d7ab0ae6752158075a1e2ee5c5b3850d92f75d099ad04db94c42dd998465972c232f7b911c56e09813531003ccf7ca7dbd4f0232cc8280d158
SSDEEP

6144:KH1SQz5JeNTAmR4yjl2OjPTJd4Qua/JwmKOK:AkQzG72OxK4xwcK

Score

N/A

Malware Config

Signatures

Files

1b50137a1017c7f4ec0850549ff87b293e391b97d84531bf307a08b479bc9800
.exe windows x86

ea3d88cb7a98745da97939b8494d68c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
SetStdHandle
SetFilePointer
WriteConsoleW
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
CloseHandle
GetLocalTime
GetLastError
HeapCreate
LoadLibraryW
GetProcessHeap
WriteFile
HeapFree
GetTickCount
GetCurrentProcess
HeapAlloc
HeapSize
CreateFileA
RtlUnwind
MultiByteToWideChar
IsValidCodePage
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
Sleep
GetCPInfo
GetACP
GetOEMCP

user32

IsWindow
ReleaseDC
CreateWindowExA
GetWindowLongA
MessageBoxA
SetWindowLongA
UpdateLayeredWindow
GetWindowRect
SendDlgItemMessageA
LoadImageW
FindWindowW
GetDC
LoadIconW

gdi32

DeleteDC
CreateDIBSection
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectA
CreateSolidBrush
BitBlt

comdlg32

ChooseColorA

ole32

CoTaskMemFree
CoCreateInstance

ws2_32

WSAStartup
WSACleanup
WSCEnumProtocols

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea3d88cb7a98745da97939b8494d68c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

ws2_32

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 149KB - Virtual size: 191KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 149KB - Virtual size: 191KB

.rsrc
Size: 16KB - Virtual size: 16KB