3c61d73ea5a10000399d579b5fd4f80ff37445de4055c36c29694d54948c7c83

Sharing

Copy URL Twitter E-mail

General

Target

3c61d73ea5a10000399d579b5fd4f80ff37445de4055c36c29694d54948c7c83
Size

150KB
MD5

6099b029eb769d5545d7732cd17b0679
SHA1

d1c592c71d0e086184f77b2799eaa870461d2f90
SHA256

3c61d73ea5a10000399d579b5fd4f80ff37445de4055c36c29694d54948c7c83
SHA512

8e6f3cf923730fc1fc904e798037a686bfc512fc745f961f3e7662308e793e80f1177dd62fd4b57f74ada655cf593995f1728c68c0f02f010d0fdcb002a5f646
SSDEEP

1536:7ijzTiL8FjXVrIR6tewRz922o0NnsiTqKjvMyMIhv59v2FpeowGaDtuRNDf:7+iL4k8w8S0Nngy3d59v2FpeowpDKf

Score

N/A

Malware Config

Signatures

Files

3c61d73ea5a10000399d579b5fd4f80ff37445de4055c36c29694d54948c7c83
.exe windows x86

d087709ee49325b1e879fa4422bce6d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW

kernel32

Sleep
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetVersionExW
CreateMutexW
GetLastError
GetCurrentThreadId
CloseHandle
GetProcAddress
FreeLibrary
LoadLibraryW
OpenMutexW
CreateProcessW
GetLocalTime
GetStartupInfoW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedDecrement
MultiByteToWideChar
RaiseException
RtlUnwind
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WideCharToMultiByte
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
HeapSize
CreateFileW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileA

user32

TranslateAcceleratorW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
SetTimer
DialogBoxParamW
LoadAcceleratorsW
DefWindowProcW
BeginPaint
EndPaint
KillTimer
PostQuitMessage
EndDialog
DispatchMessageW
TranslateMessage
GetMessageW
DestroyWindow
LoadStringW

advapi32

GetUserNameW

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d087709ee49325b1e879fa4422bce6d0

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

oleaut32

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 26KB - Virtual size: 27KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 26KB - Virtual size: 27KB