55169b7aefca1412558e187c7cb7bbc6aea78d269e7de65a45e478ad11887143

Sharing

Copy URL Twitter E-mail

General

Target

55169b7aefca1412558e187c7cb7bbc6aea78d269e7de65a45e478ad11887143
Size

254KB
MD5

0479bb924597c1064b122657ed0f57b0
SHA1

eae1fb590ee5f5313d9ecd08f9aff925b05eec39
SHA256

55169b7aefca1412558e187c7cb7bbc6aea78d269e7de65a45e478ad11887143
SHA512

e72191656d91b59810a5cda34d24b35bcadb91d496824a9fff98c785a0d54b6aac58a455522de525c5583d576257a827e6c8ef8ad085efa7cf6581cc3064d731
SSDEEP

3072:8fRq5YECULPECXHGx/yIcah5kH0Gr/5XfXxl3g8L5L/azP96bKyEvIql:8gS2PECXHGmXH0G9vXxWGoFFyyl

Score

N/A

Malware Config

Signatures

Files

55169b7aefca1412558e187c7cb7bbc6aea78d269e7de65a45e478ad11887143
.exe windows x86

8ff36ab0f3193a12731857098202c110

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDisplayDevicesA
SystemParametersInfoA
SetCursor
IsWindowVisible
VkKeyScanExA
IsDlgButtonChecked
MapVirtualKeyW
RegisterClipboardFormatW
GetMenuItemInfoW
IsRectEmpty
RedrawWindow

dbghelp

EnumerateLoadedModules64
FindFileInSearchPath
SymGetModuleInfoW
SymEnumSymbols
GetTimestampForLoadedLibrary
EnumerateLoadedModules
FindExecutableImage

kernel32

SetConsoleMode
ReadConsoleInputA
CreateFileW
CloseHandle
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
CompareStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
LoadLibraryW
HeapQueryInformation
GetLastError
GetProcessHeap
GlobalMemoryStatusEx
GetStdHandle
SetCommState
LCMapStringA
WaitNamedPipeA
ReadConsoleA
CreateConsoleScreenBuffer
InterlockedDecrement
InterlockedIncrement
GetTimeFormatA
GetDateFormatA
HeapReAlloc
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
GetTimeZoneInformation
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringW
RtlUnwind
IsProcessorFeaturePresent

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ff36ab0f3193a12731857098202c110

Headers

DLL Characteristics

File Characteristics

Imports

user32

dbghelp

kernel32

Sections

.text Size: 57KB - Virtual size: 56KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 18KB

.rsrc Size: 175KB - Virtual size: 176KB

.text
Size: 57KB - Virtual size: 56KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 18KB

.rsrc
Size: 175KB - Virtual size: 176KB