684b3da665f3309b7ff127df98fbefb95c0364d8f22be2f1238bd89bceab8cc5

Sharing

Copy URL Twitter E-mail

General

Target

684b3da665f3309b7ff127df98fbefb95c0364d8f22be2f1238bd89bceab8cc5
Size

143KB
MD5

128f9652a5d4190cc0ca6ce29bca1ae0
SHA1

ad37e3c2162d7aec9bba5b2f2a9127be4ede9f3d
SHA256

684b3da665f3309b7ff127df98fbefb95c0364d8f22be2f1238bd89bceab8cc5
SHA512

57915bb9200b9e959d5339675c537b298b34c48756ea5b8ed5642c780f9064fb1dd47fc16cd1ab4e474f8e80e9025e35553a75cc80c53fc5746bb883a625a0b1
SSDEEP

3072:4Y8lmO2/Li7Fnt22vXmIr+rMB7eaNFF3sQKColhA:V8lmO2+FnbmWc2HFfUM

Score

N/A

Malware Config

Signatures

Files

684b3da665f3309b7ff127df98fbefb95c0364d8f22be2f1238bd89bceab8cc5
.exe windows x86

055c7ed0f235b682736a5cd784579638

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord163

ole32

CoRevokeClassObject
CLSIDFromProgID
RevokeDragDrop
CoInitializeEx
OleInitialize
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance

user32

SetActiveWindow

kernel32

lstrlenA
CompareStringW
CompareStringA
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
GetCommandLineW
GetModuleHandleW
lstrcmpA
VirtualAlloc
HeapSize
GlobalAlloc
FormatMessageW
HeapDestroy
FreeLibrary
LoadLibraryExW
GetVersionExW
LoadLibraryA
SetFilePointerEx
TlsFree
LocalFree
WideCharToMultiByte
EnterCriticalSection
ExitProcess
TryEnterCriticalSection
GetStartupInfoA
HeapCreate
FindClose
SetHandleCount
lstrlenW
WaitForSingleObject
LCMapStringW
InterlockedExchange
WriteFile
LocalAlloc
HeapAlloc
GetFileAttributesW
ReadFile
LoadResource
CreateFileA
SizeofResource
SetEndOfFile
LoadLibraryW
CreateEventW
MultiByteToWideChar
SetStdHandle
GetStringTypeW
GetModuleHandleA
SetFilePointer
HeapFree
SetEnvironmentVariableA
GetOEMCP
IsDebuggerPresent
GetTickCount
GetEnvironmentStringsW
GetVersionExA
GetCurrentThread
GetProcessVersion
GetCurrentProcessId
GetCommandLineA
GetEnvironmentStrings
GetPriorityClass
GetProcessHeap
GetProcAddress
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
InitializeCriticalSection
GetCPInfo
GetACP
Sleep
HeapReAlloc
RtlUnwind

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

055c7ed0f235b682736a5cd784579638

Headers

DLL Characteristics

File Characteristics

Imports

msi

ole32

user32

kernel32

Sections

.text Size: 81KB - Virtual size: 81KB

.data Size: 50KB - Virtual size: 50KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 81KB - Virtual size: 81KB

.data
Size: 50KB - Virtual size: 50KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB