a4fc16e935376363f0f0784efbf9cfd8afa7491c645eaf4e3963eba48ba4903a

Sharing

Copy URL Twitter E-mail

General

Target

a4fc16e935376363f0f0784efbf9cfd8afa7491c645eaf4e3963eba48ba4903a
Size

128KB
MD5

7c8f1275d3c73fd8ef63db0ce8dcb110
SHA1

d25da7509c8acca59e937540887f9fa0d429fae0
SHA256

a4fc16e935376363f0f0784efbf9cfd8afa7491c645eaf4e3963eba48ba4903a
SHA512

b52a309144023b262ab7070d51832bee40e168cdc5522b3f26a10103ecb9d366bc91a3005ee1927e6d8181ffd1f24093e8c5db5f66b295d31dcd82331a90cbad
SSDEEP

3072:+3dJzUuLmcXRXH9TQ39QCIBeAfE0DNOQVP9TNZqJXr:Qd6u/BX9TjCIBeAdEQF9xZqJXr

Score

N/A

Malware Config

Signatures

Files

a4fc16e935376363f0f0784efbf9cfd8afa7491c645eaf4e3963eba48ba4903a
.exe windows x86

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RegisterFormatEnumerator
URLOpenPullStreamA
URLDownloadToCacheFileW

wininet

RetrieveUrlCacheEntryFileA
InternetFindNextFileA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExW
InternetReadFile

gdi32

Chord
AddFontMemResourceEx
CreateDCA
AddFontResourceA
ColorMatchToTarget
AngleArc

crypt32

CryptGetAsyncParam
CertIsValidCRLForCertificate
CryptMsgClose
CryptMsgControl
CertAddCertificateContextToStore
CryptEnumKeyIdentifierProperties

mpr

WNetGetConnectionW
WNetAddConnectionA
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetGetLastErrorA
WNetGetLastErrorW

kernel32

LoadLibraryW
RtlUnwind
HeapReAlloc
HeapSize
GetOEMCP
Sleep
HeapFree
EnterCriticalSection
LeaveCriticalSection
CopyFileExW
DeleteTimerQueue
VerLanguageNameA
FindFirstChangeNotificationW
GetHandleInformation
WriteProcessMemory
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
HeapAlloc
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

wininet

gdi32

crypt32

mpr

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 86KB - Virtual size: 86KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 86KB - Virtual size: 86KB