aaade8cba9bcc36dd31dfd4ac2eb3d47bcb78605c8a47da4e441c3f204624536

Sharing

Copy URL Twitter E-mail

General

Target

aaade8cba9bcc36dd31dfd4ac2eb3d47bcb78605c8a47da4e441c3f204624536
Size

163KB
MD5

6aa4e59963a15a72e6a8f868725b0090
SHA1

131bc10b76e533dd1792e6490ca3f715d748a9ae
SHA256

aaade8cba9bcc36dd31dfd4ac2eb3d47bcb78605c8a47da4e441c3f204624536
SHA512

ec28851a27b64f4551c3c3455d326d814f54d0ba0490365b33151994f40d601534b3622be232c9ef0e450b3e3637c3783382a6246ca3eb0996728eb6f3ad6a55
SSDEEP

3072:Gg6vPQFVeR7fw/4O4gfOyCv86adaj7eOBxHOD/oI+0Hn+UpH:hOoVeR7frOFj6adaJxHODVT

Score

N/A

Malware Config

Signatures

Files

aaade8cba9bcc36dd31dfd4ac2eb3d47bcb78605c8a47da4e441c3f204624536
.exe windows x86

61cab373828d1a85e99f304c396cc835

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsRectEmpty
DefMDIChildProcW
SendInput
LoadStringA
SetMenuItemBitmaps
GetWindowRgn
GetWindowPlacement
DrawStateW
FillRect
SendNotifyMessageA
DispatchMessageW
ImpersonateDdeClientWindow
GrayStringW
PtInRect

ole32

CoReleaseServerProcess
CoTaskMemFree
GetHGlobalFromILockBytes
OleCreateDefaultHandler
OleCreateLinkEx
CoCreateFreeThreadedMarshaler

advapi32

RegSaveKeyA
UnlockServiceDatabase
InitializeSid
QueryServiceConfigA
ReportEventW
CloseServiceHandle
RegCreateKeyExA
ImpersonateNamedPipeClient

gdi32

Arc
BitBlt
CreateDIBPatternBrushPt
CancelDC
ChoosePixelFormat
AddFontResourceExA

ws2_32

gethostname
gethostbyname
getservbyname
getprotobynumber
htonl
setsockopt

kernel32

GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
HeapReAlloc
EncodePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetLastError
HeapDestroy
HeapCreate
SetDefaultCommConfigW
lstrlenA
ResetWriteWatch
EnumDateFormatsW
RemoveDirectoryA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
GetCPInfo

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61cab373828d1a85e99f304c396cc835

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

gdi32

ws2_32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 10KB - Virtual size: 19KB

.rsrc Size: 113KB - Virtual size: 112KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 10KB - Virtual size: 19KB

.rsrc
Size: 113KB - Virtual size: 112KB