6652507459059404c8dd4436df68ee2c4de37788eebab5e7ad452eb683ae08dd

Sharing

Copy URL

Twitter E-mail

General

Target

6652507459059404c8dd4436df68ee2c4de37788eebab5e7ad452eb683ae08dd
Size

196KB
MD5

06fd093db89798b4f7cae5f5b29390b0
SHA1

fe799eee34425a820609d73c4953f7a17b5bfb8c
SHA256

6652507459059404c8dd4436df68ee2c4de37788eebab5e7ad452eb683ae08dd
SHA512

500c159c23ad731778f8eedf162b190be58193c4b9645007a3dddce01bc89f2833291c0ba16c47de4a76b3f460b0d891d466f0d548b9773145b993aa718f8501
SSDEEP

3072:Y+PQZ33vVGHLlW5wDQq1qrXY8qY40tTie62ZTyW7+fXbz:YPZ33vgHpDAtTiexFO

Score

N/A

Malware Config

Signatures

Files

6652507459059404c8dd4436df68ee2c4de37788eebab5e7ad452eb683ae08dd
.exe windows x86

b9710d2b149ce13ab0cf1cc457dec5e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
GetCurrentProcessId
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
QueryPerformanceCounter
GetStartupInfoA
GetStartupInfoW
GetCurrentThreadId
GetModuleHandleA
GetCurrentThread
GetModuleHandleW
VirtualAlloc
lstrlenA
SetStdHandle
WaitForSingleObject
LCMapStringW
ExitProcess
WideCharToMultiByte
GlobalFree
CreateEventW
GetFileAttributesA
lstrlenW
GetStringTypeW
LocalAlloc
EnterCriticalSection
LocalFree
LoadLibraryA
LoadLibraryExW
FreeLibraryAndExitThread
GetVersionExW
FindClose
HeapAlloc
CloseHandle
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
HeapReAlloc
OutputDebugStringW
RtlUnwind
FreeLibrary
SetConsoleCtrlHandler
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
FatalAppExitA
LeaveCriticalSection
CreateSemaphoreW
CreateFileW
GetTickCount
TlsFree
GetCommandLineW
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetLastError
SetLastError
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue

user32

GetSystemMetrics
IsWindowEnabled
ChildWindowFromPoint
wsprintfA
SetClipboardData
SetMenuItemBitmaps
LoadIconA
EnableWindow
CloseClipboard
DrawTextW
ClientToScreen
GetClientRect
EndPaint
SetWindowPos
FillRect
GetSubMenu
GetWindowRect
PostQuitMessage
PostMessageA
GetWindowInfo
DispatchMessageW
GetMenuItemID
InvalidateRect
SetFocus
GetParent

msi

ord50

shell32

SHFileOperationW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9710d2b149ce13ab0cf1cc457dec5e7

Headers

File Characteristics

Imports

kernel32

user32

msi

shell32

Sections

.text Size: 108KB - Virtual size: 107KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 52KB - Virtual size: 101KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 108KB - Virtual size: 107KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 52KB - Virtual size: 101KB

.reloc
Size: 8KB - Virtual size: 5KB