9a79f7b8efc330001786ccd9422e5957ace556145eefb128b6effc21232a894a

Sharing

Copy URL Twitter E-mail

General

Target

9a79f7b8efc330001786ccd9422e5957ace556145eefb128b6effc21232a894a
Size

222KB
MD5

6bd9ba9e517ecc9bf0f2463946bfaff0
SHA1

8a4afa284c13014337cb40dfc38094f300abb7c6
SHA256

9a79f7b8efc330001786ccd9422e5957ace556145eefb128b6effc21232a894a
SHA512

7c59e9025d0971bdb5c28bb78211f128f6b0a82092661147148b3617a8f0b52df83d8e23154e4170d246c203e8d03134ca356d311af2949038fda700d94733e9
SSDEEP

1536:jJHK1FDfg9pvUGo9Vt/InWNV7swS+HIiN6pn1JzLxHtXNDMPRgE+E:jJaZgf7WjswfoiNWjzLxPFE+

Score

N/A

Malware Config

Signatures

Files

9a79f7b8efc330001786ccd9422e5957ace556145eefb128b6effc21232a894a
.exe windows x86

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
GetCurrentProcessId
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
GetCurrentProcess
GetCommandLineW
FreeLibrary
FormatMessageW
FlushInstructionCache
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CloseHandle
VirtualAllocEx
GetModuleHandleA
GetProcAddress
CreateFileA
IsBadWritePtr
lstrcatA

user32

GetWindowLongW
KillTimer
LoadBitmapW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
GetSysColorBrush
GetMonitorInfoW
GetMessageW
GetClientRect
FindWindowW
EndDialog
DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
CharNextW
CallWindowProcW
LoadIconA
DefWindowProcA
LoadIconW
GetSystemMetrics
LoadCursorA

gdi32

DeleteObject
GetStockObject

advapi32

RegOpenKeyA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

shell32

CommandLineToArgvW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_snwprintf
_wcmdln
_wcsicmp
_wcsnicmp
exit
wcscat
wcscmp
wcscpy
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 206KB - Virtual size: 206KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 206KB - Virtual size: 206KB

.rsrc
Size: 5KB - Virtual size: 4KB