0c4c6a36fb98d145402fbf94cb4988e46117ca675e1d1b16d6a60dbbb9e72be0

Sharing

Copy URL Twitter E-mail

General

Target

0c4c6a36fb98d145402fbf94cb4988e46117ca675e1d1b16d6a60dbbb9e72be0
Size

257KB
MD5

6467f74e1ff89c12415cf88d5789009c
SHA1

41a7ba2565c991fc8c1ed0d7c6852e77fca74dfb
SHA256

0c4c6a36fb98d145402fbf94cb4988e46117ca675e1d1b16d6a60dbbb9e72be0
SHA512

a9972d919721e24b7194dc9adfe64ee7c16921f8b0d894d6486103d14f9935f8e0d387cd828bd2cb96b7caa5edffed92ed82ec98083f8a8c5d2ce6661533972c
SSDEEP

6144:JdZOqpOODuHL/us9cYWGxIxRpxQL+kRiBChDp7MpxXTq2:XkODuHyseYW2IzT4R3ht7Mx

Score

N/A

Malware Config

Signatures

Files

0c4c6a36fb98d145402fbf94cb4988e46117ca675e1d1b16d6a60dbbb9e72be0
.exe windows x86

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
ExitProcess
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetLastError
TlsAlloc
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapCreate
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatA
GetDateFormatA
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
GetSystemInfo
DuplicateHandle
CreatePipe
SystemTimeToFileTime
BeginUpdateResourceW
GetProcAddress

security

SealMessage
CompleteAuthToken

user32

EnableWindow
CopyIcon
SetWindowLongW
CreateDialogIndirectParamA
LoadMenuW
DestroyCursor
TrackPopupMenuEx
RegisterWindowMessageA
GetMenuStringW
wsprintfW
CreateWindowExA
FindWindowW
GetMenuStringA
SetActiveWindow
IsWindow
GetMenuItemInfoA
SetFocus
OffsetRect
RegisterClassExA
WaitForInputIdle

gdi32

RemoveFontResourceExW
CreateColorSpaceW
GetTextExtentPointW
CreateScalableFontResourceW
CreateFontIndirectA
CreateFontW
CreateFontIndirectW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.F
Size: 3KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aGH
Size: 92KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t
Size: 4KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pOIs
Size: 2KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XFP
Size: 1KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Cvhg
Size: 122KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9226372961b736e140670af607ea1b7c

Headers

File Characteristics

Imports

kernel32

security

user32

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.F Size: 3KB - Virtual size: 229KB

.aGH Size: 92KB - Virtual size: 137KB

.t Size: 4KB - Virtual size: 257KB

.rdata Size: 3KB - Virtual size: 26KB

.pOIs Size: 2KB - Virtual size: 174KB

.XFP Size: 1KB - Virtual size: 52KB

.data Size: 5KB - Virtual size: 173KB

.Cvhg Size: 122KB - Virtual size: 218KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 14KB - Virtual size: 16KB

.F
Size: 3KB - Virtual size: 229KB

.aGH
Size: 92KB - Virtual size: 137KB

.t
Size: 4KB - Virtual size: 257KB

.rdata
Size: 3KB - Virtual size: 26KB

.pOIs
Size: 2KB - Virtual size: 174KB

.XFP
Size: 1KB - Virtual size: 52KB

.data
Size: 5KB - Virtual size: 173KB

.Cvhg
Size: 122KB - Virtual size: 218KB

.rsrc
Size: 8KB - Virtual size: 7KB