9732b398142275751d133ed9f522f265735e511bdb8f2e1cc37c5760ecc03e75

Sharing

Copy URL Twitter E-mail

General

Target

9732b398142275751d133ed9f522f265735e511bdb8f2e1cc37c5760ecc03e75
Size

581KB
MD5

7bcde35d3f0fa085b32afb434eebcf30
SHA1

0c4407f61a71241a125a4bd05173b0dab0215132
SHA256

9732b398142275751d133ed9f522f265735e511bdb8f2e1cc37c5760ecc03e75
SHA512

47977e51e54d99c5157aa164b47766734c02d62a2cc845e4eff5b160eaee2cc1724d1bcc1439353d7494ce732e986db5e5a967d39f9c7b83030df71117881147
SSDEEP

12288:JizFhC8MwBNU9ta1smjnB1+TEqR0cPMco:iC8Ro0n+oqNo

Score

N/A

Malware Config

Signatures

Files

9732b398142275751d133ed9f522f265735e511bdb8f2e1cc37c5760ecc03e75
.exe windows x86

1eadfb2c79d27ba23960c157afc70ac3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

CreateEventW
GetModuleHandleA
lstrcpyA
SetStdHandle
SetFilePointer
WriteConsoleW
CloseHandle
HeapSize
RtlUnwind
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
HeapReAlloc
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GlobalFree
lstrcmpiA
GetCurrentDirectoryW
GetLastError
GetStdHandle
GlobalUnlock
MultiByteToWideChar
GetVolumePathNamesForVolumeNameW
HeapCreate
WideCharToMultiByte
GlobalAlloc
GetLogicalDrives
GlobalLock
HeapAlloc
GetConsoleCP
ExitProcess
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateFileW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
Sleep
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
IsProcessorFeaturePresent
HeapFree
GetProcAddress
GetModuleHandleW
DecodePointer
WriteFile
GetModuleFileNameW

user32

GetDC
GetDialogBaseUnits
DrawFrameControl
EndDeferWindowPos
SetClipboardData
GetSystemMetrics
RegisterClassW
BeginDeferWindowPos
DeferWindowPos
OpenClipboard
EndPaint
DestroyWindow
CloseClipboard
PostQuitMessage
CopyImage
IsClipboardFormatAvailable
LoadCursorW
wsprintfA
IsWindow
SendMessageA
BeginPaint
GetClientRect
LoadIconW
GetClipboardData
ReleaseDC
EmptyClipboard
GetDlgItem
EndDialog
DefWindowProcA
EnumChildWindows

gdi32

PatBlt
GetTextExtentPoint32A
LineTo
DeleteDC
CreateFontA
GetDeviceCaps
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Ellipse
SaveDC
Polyline
GetStockObject
RestoreDC
TextOutA
MoveToEx

ole32

CreateBindCtx
CoInitialize

oleaut32

SysStringLen
SysAllocStringLen

ws2_32

WSAStartup

shlwapi

StrToIntExA

sensapi

IsNetworkAlive

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.love
Size: 385KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1eadfb2c79d27ba23960c157afc70ac3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

ws2_32

shlwapi

sensapi

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 12KB

.love Size: 385KB - Virtual size: 385KB

.ddata Size: 3KB - Virtual size: 2KB

.rsrc Size: 96KB - Virtual size: 95KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 12KB

.love
Size: 385KB - Virtual size: 385KB

.ddata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 96KB - Virtual size: 95KB

.reloc
Size: 9KB - Virtual size: 8KB