83f21c8603c64b08e32f6cb3ecce566b8edc967911b3c3e9b1c475a494f0f525

Sharing

Copy URL Twitter E-mail

General

Target

83f21c8603c64b08e32f6cb3ecce566b8edc967911b3c3e9b1c475a494f0f525
Size

222KB
MD5

6f008959f9159d54be23a3bce85f4430
SHA1

c7662a2bdfcee2b12cf3e25bdd818915f965d472
SHA256

83f21c8603c64b08e32f6cb3ecce566b8edc967911b3c3e9b1c475a494f0f525
SHA512

09c9793bf7f836745812c563a7349f4d72b1a9555870203496b5781b559df9b4a25f4fb10f7a5824940d43d61c2080e40725d0fd117b1215bece4a809bdd99e0
SSDEEP

1536:jJHK1FDfg9pvUGo9Vt/InWNV7swS+HIiN6pn1JzLxHtXNDMPRgECE:jJaZgf7WjswfoiNWjzLxPFEC

Score

N/A

Malware Config

Signatures

Files

83f21c8603c64b08e32f6cb3ecce566b8edc967911b3c3e9b1c475a494f0f525
.exe windows x86

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
GetCurrentProcessId
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
GetCurrentProcess
GetCommandLineW
FreeLibrary
FormatMessageW
FlushInstructionCache
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CloseHandle
VirtualAllocEx
GetModuleHandleA
GetProcAddress
CreateFileA
IsBadWritePtr
lstrcatA

user32

GetWindowLongW
KillTimer
LoadBitmapW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
GetSysColorBrush
GetMonitorInfoW
GetMessageW
GetClientRect
FindWindowW
EndDialog
DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
CharNextW
CallWindowProcW
LoadIconA
DefWindowProcA
LoadIconW
GetSystemMetrics
LoadCursorA

gdi32

DeleteObject
GetStockObject

advapi32

RegOpenKeyA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

shell32

CommandLineToArgvW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_snwprintf
_wcmdln
_wcsicmp
_wcsnicmp
exit
wcscat
wcscmp
wcscpy
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 206KB - Virtual size: 206KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 206KB - Virtual size: 206KB

.rsrc
Size: 5KB - Virtual size: 4KB