597b228286a2df77d7edbba3a945f3f329057adebe86ecf3fee2f476d8020a6b

Sharing

Copy URL Twitter E-mail

General

Target

597b228286a2df77d7edbba3a945f3f329057adebe86ecf3fee2f476d8020a6b
Size

132KB
MD5

c526cf3d55f156cf5df12da88ec43578
SHA1

904152a67572882351f267b0cee4c9d362f58c4f
SHA256

597b228286a2df77d7edbba3a945f3f329057adebe86ecf3fee2f476d8020a6b
SHA512

bca34f039ddacb26508791cafd222ad808e9635e6a353e9e2114edd577c98e0383c7c87ab278c90a12108a648fd8a078cafbcfcb100ead5803ceb17f481b9395
SSDEEP

1536:2AhYzBD3aS4WrjGTbEl0AekYVBgRwRlb+U+tuZAwmeyh5lHo9xXnqMo1tRHoUiXq:2AhoVZN0dBeg+LYhmeyh5O3to75KVQ

Score

N/A

Malware Config

Signatures

Files

597b228286a2df77d7edbba3a945f3f329057adebe86ecf3fee2f476d8020a6b
.exe windows x86

0ce95a8f364f5bbe11f97ed20f3299f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableWindow
ChangeClipboardChain
DestroyMenu
OpenInputDesktop
GetWindowDC
MoveWindow
SetMenuItemInfoA
AppendMenuA
CreatePopupMenu
SetWindowTextA
DestroyIcon
LoadIconA
InvalidateRect
CharLowerA
LoadBitmapA
KillTimer
IsZoomed
IsDlgButtonChecked
EnableMenuItem
IsWindowEnabled
SetFocus
GetCursorPos
ScreenToClient
SendMessageA
OpenClipboard
CloseClipboard
CallWindowProcA
MessageBeep
wsprintfA
MessageBoxA
CharUpperA
GetClipboardData
EnumClipboardFormats
EmptyClipboard
ClientToScreen
SystemParametersInfoA
SystemParametersInfoW
GetCapture

shell32

ShellExecuteA
DragAcceptFiles
DragFinish
SHGetFileInfoA
DragQueryFileA

advapi32

GetFileSecurityW

gdi32

GetDeviceGammaRamp
GetSystemPaletteUse
CreateCompatibleDC
GetLogColorSpaceA
GetNearestColor
SetMetaRgn
SetPixelV
GetArcDirection
SetViewportOrgEx
GetTextMetricsW
GetPixel
SelectPalette
RectInRegion
GetKerningPairsA
GetWorldTransform
GetPolyFillMode
GetTextFaceA

dbghelp

ImageNtHeader
ImageRvaToSection
ImageRvaToVa

crypt32

CertFreeCertificateContext

comctl32

ImageList_Add
InitCommonControlsEx
ImageList_Remove
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy

kernel32

EnterCriticalSection
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
GetCPInfo
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
HeapSize
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
InterlockedDecrement
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
RtlCaptureStackBackTrace
DisconnectNamedPipe
LocalAlloc
DecodePointer
AssignProcessToJobObject
MapUserPhysicalPages
RequestWakeupLatency
GetTapeStatus
GlobalDeleteAtom
lstrcmpW
CreateEventW
WriteProcessMemory
VirtualAlloc
lstrcpyW
FindResourceExW
SetStdHandle
FindFirstFileA
MulDiv
Sleep
ReadFile
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadProcessMemory
OpenProcess
CloseHandle
SetThreadPriority
SetCurrentDirectoryA
ExitProcess
VirtualLock
VirtualUnlock
GetPrivateProfileStringA
WritePrivateProfileStringA
SetEndOfFile
CreateFileMappingA
MapViewOfFile
CopyFileA
lstrlenA
lstrcatA
lstrcpynA
CreateProcessA
SetFileAttributesA
GetSystemTimeAsFileTime
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ce95a8f364f5bbe11f97ed20f3299f7

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

advapi32

gdi32

dbghelp

crypt32

comctl32

kernel32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 32KB

.rsrc Size: 56KB - Virtual size: 56KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 32KB

.rsrc
Size: 56KB - Virtual size: 56KB