9b829c08a16932ebff1a5ab83de90f3ce228fe8b6f4c8845dac587be3dafc1a6

Sharing

Copy URL Twitter E-mail

General

Target

9b829c08a16932ebff1a5ab83de90f3ce228fe8b6f4c8845dac587be3dafc1a6
Size

186KB
MD5

4ec00ba9174f56540137d97104e8568c
SHA1

7a517cae239076e3ad0ca45b2855cb6da943e21c
SHA256

9b829c08a16932ebff1a5ab83de90f3ce228fe8b6f4c8845dac587be3dafc1a6
SHA512

82f73956ccc396e6ac2809ffe6763a5eaf8ea3673cf39df9c29b491d0c8285dc6280fa1b9c641ef9bfb51a7c1af1c3826469e5d494ee3d3301d785c454042fdd
SSDEEP

1536:dWfUIT6OIX1yQtHp5Nc9b8ndXRoNo7d1ZjviCeqxD6Z7jAgF35woKUL1HMwnVdf1:d4vOOOZdBwlHqx2VA05woKULiwnVQQ

Score

N/A

Malware Config

Signatures

Files

9b829c08a16932ebff1a5ab83de90f3ce228fe8b6f4c8845dac587be3dafc1a6
.exe windows x86

4c20db64e8df3b30ed1d04b5cdb9f3b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedExchange
LCMapStringA
LCMapStringW
LoadLibraryA
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
GlobalFree
RtlUnwind
SetHandleCount
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatW
lstrcpyW
lstrlenW
GetVersionExA
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetFileSize
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
CreateFileW
CloseHandle
GetCurrentProcess
VirtualAlloc
GetStartupInfoA
GlobalAlloc
ReadFile
GetWindowsDirectoryA

user32

IsZoomed
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadStringA
LoadStringW
MessageBoxA
MessageBoxW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RegisterClassW
ReleaseCapture
ReleaseDC
SendMessageW
SetCapture
SetDlgItemTextW
SetRect
SetTimer
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnionRect
UpdateWindow
WaitMessage
WinHelpW
wsprintfW
IsIconic
IsDlgButtonChecked
InvertRect
InvalidateRect
IntersectRect
GetWindowRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetParent
GetMessageW
GetMenu
GetForegroundWindow
GetDlgItemTextW
GetDlgItem
GetDC
GetClientRect
FrameRect
FillRect
EndPaint
EndDialog
EnableMenuItem
DrawTextW
DrawMenuBar
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CheckRadioButton
CheckDlgButton
BeginPaint
LoadCursorA
LoadIconA
GetSysColor
GetDesktopWindow

gdi32

GetPixel
GetStockObject
GetTextColor
CreateCompatibleDC
GetTextExtentPoint32W
LineTo
GetDeviceCaps
RestoreDC
SaveDC
SelectObject
SetBkMode
SetPixel
SetTextColor
GetBkMode
GdiFlush
ExcludeClipRect
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
MoveToEx
BitBlt
CreateCompatibleBitmap
CreateFontIndirectW

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
RegOpenKeyA
RegSetValueExW

shell32

SHGetSpecialFolderPathW

msvcrt

memcpy

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c20db64e8df3b30ed1d04b5cdb9f3b3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 40KB - Virtual size: 40KB

.text2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 59KB - Virtual size: 58KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 40KB - Virtual size: 40KB

.text2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 59KB - Virtual size: 58KB