a960dad29ae3c684ef8f863359494df7aed18c6c3be0e96035ccc0dcd371bda7

Sharing

Copy URL Twitter E-mail

General

Target

a960dad29ae3c684ef8f863359494df7aed18c6c3be0e96035ccc0dcd371bda7
Size

451KB
MD5

46391ba268d5ffe558e3e6767ab96b10
SHA1

5d64e8978295a8275bc2b6e5649f697028e0869b
SHA256

a960dad29ae3c684ef8f863359494df7aed18c6c3be0e96035ccc0dcd371bda7
SHA512

59db85c33309a51ea8ef47312c2ae1d13b2dfa5ea5138e5399f9cff267d88efab60d31a9da5ee2506054c6ce316d20039b272c818b110aa0a4dde5acf2edee27
SSDEEP

12288:VgPxrjt9up+gaKeN9Lvnx0RAhesJRniXF0o13:OVt9uqKeNJvnx+AosJxi13

Score

N/A

Malware Config

Signatures

Files

a960dad29ae3c684ef8f863359494df7aed18c6c3be0e96035ccc0dcd371bda7
.exe windows x86

f3af40fe84a077edb9fd611ff5566baf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

HeapSize
IsProcessorFeaturePresent
HeapReAlloc
WriteConsoleW
SetStdHandle
RtlUnwind
LoadLibraryW
CreateFileW
GetStringTypeW
LCMapStringW
Sleep
GetSystemTime
CloseHandle
GetLastError
GlobalUnlock
ReadFile
HeapCreate
GlobalAlloc
FormatMessageA
GetProcessHeap
GlobalLock
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
GetFileSize
CreateFileA
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
FlushFileBuffers

user32

EnumDisplaySettingsW
GetWindowTextLengthW
EnumDisplayMonitors
KillTimer
SetWindowTextA
ExitWindowsEx
SendMessageA
GetForegroundWindow
GetKeyboardLayout
MessageBoxA
GetWindowTextW
GetSysColor
GetKeyboardType
IsWindowVisible

gdi32

SelectObject
CreatePen
DeleteObject
Polyline

ole32

CreateStreamOnHGlobal
CoInitialize

oleaut32

OleSavePictureFile
OleLoadPicture

shlwapi

AssocCreate

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relo
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3af40fe84a077edb9fd611ff5566baf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

shlwapi

imm32

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 11KB

.relo Size: 252KB - Virtual size: 252KB

.gdata Size: 20KB - Virtual size: 19KB

.ndata Size: 51KB - Virtual size: 51KB

.rsrc Size: 45KB - Virtual size: 45KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 11KB

.relo
Size: 252KB - Virtual size: 252KB

.gdata
Size: 20KB - Virtual size: 19KB

.ndata
Size: 51KB - Virtual size: 51KB

.rsrc
Size: 45KB - Virtual size: 45KB

.reloc
Size: 5KB - Virtual size: 4KB