d811f1415962080eb7fa073240560d2de0169d35d59f2354ba1377fbcc9c9ef7

Sharing

Copy URL Twitter E-mail

General

Target

d811f1415962080eb7fa073240560d2de0169d35d59f2354ba1377fbcc9c9ef7
Size

403KB
MD5

6274eb058adf01716ba22b86c10d27df
SHA1

4ac1b1b57c78880cb0b3a3bef26f5b4e580f1724
SHA256

d811f1415962080eb7fa073240560d2de0169d35d59f2354ba1377fbcc9c9ef7
SHA512

5bca335f380c68db67fa256508b9fba432ee209ce6c60f502b2095f0c16cce66009900877c12c8e74d4863b9d4c3b3066d1b1d6008cc999ae9a6651a56d7209e
SSDEEP

6144:Qm0OLT30C+FYkZj7HwKSmCWT+D3on5LVMeYSfsCRImQAAtAgdN/:Qm0eT30vJ7Q/mz24n5LyeFfsEImS

Score

N/A

Malware Config

Signatures

Files

d811f1415962080eb7fa073240560d2de0169d35d59f2354ba1377fbcc9c9ef7
.exe windows x86

a8612b2c1a52f6f31e909d79b1ad4660

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

BackupWrite
GlobalFree
LoadLibraryA
GetConsoleScreenBufferInfo
GlobalMemoryStatusEx
WriteProfileStringA
FillConsoleOutputAttribute
CloseHandle
FlushFileBuffers
HeapSize
IsProcessorFeaturePresent
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
GetProcessHeaps
LoadLibraryW
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
GetProcAddress
lstrcmpiA
GetLastError
GetStdHandle
GetProfileIntA
MultiByteToWideChar
CreateActCtxA
SetConsoleCursorPosition
OpenProcess
WaitForSingleObject
GetCurrentProcess
HeapAlloc
LoadResource
FreeLibrary
SetFilePointer
lstrcmpA
FindResourceA
CreateFileA
GetFullPathNameA
FillConsoleOutputCharacterA
ExitProcess
RtlUnwind
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
HeapCreate
GetModuleFileNameW
WriteFile
GetModuleHandleW
TerminateProcess
EncodePointer
IsDebuggerPresent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileW

user32

GetSystemMetrics
LoadImageA
GetDlgItemTextA
SetDlgItemTextA
PostMessageA
DefWindowProcA
EndDialog
GetDlgItem
ReleaseDC
GetWindowLongA
GetMenu
GetDC
GetNextDlgTabItem
ClientToScreen
GetClassNameA
SetTimer
PostQuitMessage
SendDlgItemMessageA
KillTimer
GetFocus
CallNextHookEx
MessageBeep
wsprintfA
WindowFromPoint
GetClientRect
SendMessageA
BeginPaint

gdi32

EndPage
BitBlt
LineTo
StartPage
CreateHatchBrush
DeleteDC
GetDeviceCaps
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
StartDocA
Ellipse
Escape
CreatePen
EndDoc
MoveToEx

comdlg32

PrintDlgA

ole32

CoUnmarshalInterface
OleFlushClipboard
OleUninitialize
OleInitialize
CreateStreamOnHGlobal

psapi

GetModuleBaseNameA
EnumProcessModules
GetModuleFileNameExA
GetProcessMemoryInfo

userenv

GetProfilesDirectoryA

winmm

timeGetTime
timeBeginPeriod

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8612b2c1a52f6f31e909d79b1ad4660

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

psapi

userenv

winmm

version

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 209KB - Virtual size: 209KB

.data Size: 22KB - Virtual size: 30KB

.rsrc Size: 114KB - Virtual size: 113KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 209KB - Virtual size: 209KB

.data
Size: 22KB - Virtual size: 30KB

.rsrc
Size: 114KB - Virtual size: 113KB

.reloc
Size: 6KB - Virtual size: 5KB