3ede88f1e58ccf2c347f8fa31afc3728e26e459d609784af215493cdcaa8afe5

Sharing

Copy URL Twitter E-mail

General

Target

3ede88f1e58ccf2c347f8fa31afc3728e26e459d609784af215493cdcaa8afe5
Size

222KB
MD5

6886e7b5a81d897efdf47bc6ca8ac870
SHA1

b6a8804d20ebc65ef76103d375b13dbe3247870a
SHA256

3ede88f1e58ccf2c347f8fa31afc3728e26e459d609784af215493cdcaa8afe5
SHA512

06c9c8c09ab5333ea7148883219c1a7f12d6dff9039eba9e4664bed4dae2d913de5d039f76c08ae4fbb2de7faaf4ca2b67d3e6f640d0953649298d15410dbc5c
SSDEEP

1536:jJHK1FDfg9pvUGo9Vt/InWNV7swS+HIiN6pn1JzLxHtXNDMPRgEJE:jJaZgf7WjswfoiNWjzLxPFEJ

Score

N/A

Malware Config

Signatures

Files

3ede88f1e58ccf2c347f8fa31afc3728e26e459d609784af215493cdcaa8afe5
.exe windows x86

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
GetCurrentProcessId
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
GetCurrentProcess
GetCommandLineW
FreeLibrary
FormatMessageW
FlushInstructionCache
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CloseHandle
VirtualAllocEx
GetModuleHandleA
GetProcAddress
CreateFileA
IsBadWritePtr
lstrcatA

user32

GetWindowLongW
KillTimer
LoadBitmapW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
GetSysColorBrush
GetMonitorInfoW
GetMessageW
GetClientRect
FindWindowW
EndDialog
DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
CharNextW
CallWindowProcW
LoadIconA
DefWindowProcA
LoadIconW
GetSystemMetrics
LoadCursorA

gdi32

DeleteObject
GetStockObject

advapi32

RegOpenKeyA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

shell32

CommandLineToArgvW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_snwprintf
_wcmdln
_wcsicmp
_wcsnicmp
exit
wcscat
wcscmp
wcscpy
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 206KB - Virtual size: 206KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 206KB - Virtual size: 206KB

.rsrc
Size: 5KB - Virtual size: 4KB