9c6a13e811d277c4e407f6f5921dddd2dfbeaf6cf0cb2bb0d8c8e22da368f479

Sharing

Copy URL

Twitter E-mail

General

Target

9c6a13e811d277c4e407f6f5921dddd2dfbeaf6cf0cb2bb0d8c8e22da368f479
Size

137KB
MD5

64721339ce9d9101672cf9f83c9ebf46
SHA1

07bb239e104cc6ade91fb2ea6b28d8215b4d50c2
SHA256

9c6a13e811d277c4e407f6f5921dddd2dfbeaf6cf0cb2bb0d8c8e22da368f479
SHA512

9d503b9c61066c66688fc69ebe8ab200ecbc07a1e240fccdf646705b87c939ebd3ba8e80cf7cea89400742577a9e5ece271e07a93e5bfed758d3d5a34e276f31
SSDEEP

3072:tEsUqjkvgA+rROXqDvZ4e/hCL3CQ9vnkuOfpYoizXKv6tF/JQEgUlW:xpjqgAvsR4e5CL3C+vdOfppIXKSNrpU

Score

N/A

Malware Config

Signatures

Files

9c6a13e811d277c4e407f6f5921dddd2dfbeaf6cf0cb2bb0d8c8e22da368f479
.exe windows x86

b95d1ba53aab79060e394977dc35f477

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowLongW
LoadIconW
DrawFocusRect
GetQueueStatus
EndPaint
SendMessageTimeoutA
DrawStateA
EnumPropsExW
RegisterWindowMessageA
SetWindowsHookA
ChangeClipboardChain

shell32

DragQueryPoint
DragAcceptFiles
ShellExecuteExA
Shell_NotifyIconW
ShellExecuteA
DoEnvironmentSubstW
FindExecutableA

wininet

FtpSetCurrentDirectoryW
InternetCreateUrlW
InternetReadFileExW
RetrieveUrlCacheEntryFileA
HttpQueryInfoA
InternetCreateUrlA

gdi32

CreateDIBSection
CancelDC
CloseFigure
CombineTransform
CombineRgn

kernel32

CreateFileW
WriteConsoleW
CloseHandle
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ReadFile
ReadConsoleInputA
SetConsoleMode
SetFilePointer
UnhandledExceptionFilter
GlobalSize
LoadModule
CreateJobObjectW
WriteFileEx
GetComputerNameExA
EndUpdateResourceA
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
HeapFree
MultiByteToWideChar

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b95d1ba53aab79060e394977dc35f477

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

wininet

gdi32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 86KB - Virtual size: 160KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 86KB - Virtual size: 160KB