b9a5f482cf85f46a5e296e65a813d4bfb13f9e985201829f7a92706ca9396064

Sharing

Copy URL Twitter E-mail

General

Target

b9a5f482cf85f46a5e296e65a813d4bfb13f9e985201829f7a92706ca9396064
Size

180KB
MD5

fe086501a2eb2f2afc73a33c489e940d
SHA1

0be4b06fad1a7bd996262a17567555dc4a4f7d57
SHA256

b9a5f482cf85f46a5e296e65a813d4bfb13f9e985201829f7a92706ca9396064
SHA512

a20c44be7810b60a55132a71c22682fe767bf8de82c646b54f4d548cb9b84491d3df1044602214972dc26bf584c0775c21faba787f80f6828b294bacd8544982
SSDEEP

3072:3oOZ1Yji/hvxXqH9tAl2KzE67FmAF/pstBaDqwONnct437Bl3N2UFh:3l/h1qdtfKzE67FmAF/p/uwONct43j9B

Score

N/A

Malware Config

Signatures

Files

b9a5f482cf85f46a5e296e65a813d4bfb13f9e985201829f7a92706ca9396064
.exe windows x86

3ff2ade5c26b8a08b71b9ef536e6ed71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc140u

ord3872
ord6549
ord6825
ord3246
ord3362
ord6533
ord9210
ord9235
ord12173
ord2760
ord13752
ord6218
ord3164
ord3403
ord3404
ord4092
ord11396
ord11015
ord9040
ord12131
ord7495
ord7450
ord4936
ord5003
ord4948
ord4966
ord4960
ord4954
ord5013
ord4997
ord4942
ord5019
ord4974
ord4912
ord4927
ord4988
ord4502
ord9693
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord5935
ord2682
ord12124
ord3941
ord9209
ord3372
ord3371
ord6489
ord6566
ord8470
ord8386
ord12865
ord8324
ord5357
ord2486
ord12541
ord12542
ord14589
ord7922
ord14595
ord9398
ord4152
ord4090
ord12947
ord7941
ord2034
ord11982
ord11983
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord9128
ord14668
ord6349
ord3852
ord5918
ord12239
ord6497
ord12247
ord4589
ord8217
ord10433
ord12251
ord12219
ord12928
ord5763
ord10250
ord6860
ord7653
ord10379
ord6220
ord4219
ord13756
ord3145
ord3305
ord2993
ord5249
ord5549
ord5760
ord9126
ord5525
ord5790
ord5252
ord2246
ord2409
ord1002
ord1476
ord7441
ord1511
ord3296
ord2385
ord2389
ord296
ord1045
ord2383
ord995
ord1472
ord3882
ord4815
ord1663
ord2304
ord1113
ord1111
ord1066
ord1070
ord1433
ord1133
ord7997
ord2205
ord952
ord7313
ord13442
ord13911
ord8124
ord5921
ord285
ord5884
ord3009
ord286
ord3833
ord2215
ord1549
ord2360
ord2990
ord14320
ord3816
ord3697
ord890
ord1391
ord11038
ord360
ord5422
ord8345
ord14507
ord5427
ord13960
ord14137
ord1067
ord4477
ord293
ord462
ord10472
ord3605
ord1523
ord8032
ord1525
ord13544
ord1540
ord6229
ord5481
ord6966
ord5411
ord5228
ord3302
ord8210
ord2761
ord14785
ord10285
ord10287
ord10286
ord10284
ord10288
ord5652
ord6129
ord7722
ord7723
ord7712
ord5409
ord8219
ord10255
ord11725
ord11726
ord9139
ord12089
ord3838
ord8744
ord4222
ord12168
ord3147
ord11936
ord14588
ord8965
ord12220
ord6978
ord11002
ord9256
ord3266
ord13878
ord3265
ord6490
ord12262
ord12258
ord9350
ord1722
ord6559
ord1744
ord1770
ord1756
ord1777

kernel32

IsProcessorFeaturePresent
Sleep
LocalFree
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
TerminateProcess
GetCurrentProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
DecodePointer

user32

EnableWindow
SendMessageW
DrawIcon
IsIconic
GetClientRect
SetTimer
MessageBeep
GetSystemMetrics
LoadIconW
KillTimer

oleaut32

VariantClear

vcruntime140

__CxxDetectRethrow
__FrameUnwindFilter
__CxxExceptionFilter
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
_except_handler4_common
__CxxFrameHandler3
memset
__current_exception_context
_CxxThrowException
__current_exception

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initterm
_set_app_type
_seh_filter_exe
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
abort
_exit
terminate
_cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

advapi32

RegEnumValueW
RegOpenKeyExW

comctl32

InitCommonControlsEx

api-ms-win-crt-time-l1-1-0

_localtime64_s
wcsftime
_time64

api-ms-win-crt-convert-l1-1-0

_wtof
_wtoi

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ff2ade5c26b8a08b71b9ef536e6ed71

Headers

DLL Characteristics

File Characteristics

Imports

mfc140u

kernel32

user32

oleaut32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

advapi32

comctl32

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

mscoree

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 59KB - Virtual size: 59KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 72KB - Virtual size: 72KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 59KB - Virtual size: 59KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 72KB - Virtual size: 72KB

.reloc
Size: 3KB - Virtual size: 2KB