63633cbfcf93959eb3e11d6f6b255b028e77ee96c27ea2b23b38d3646f780fa6

Sharing

Copy URL Twitter E-mail

General

Target

63633cbfcf93959eb3e11d6f6b255b028e77ee96c27ea2b23b38d3646f780fa6
Size

442KB
MD5

763f098673f58852999618b2bb6f3841
SHA1

bc3f2ca8528d77ceb40a1fe6f2d8b6fb65f85ab9
SHA256

63633cbfcf93959eb3e11d6f6b255b028e77ee96c27ea2b23b38d3646f780fa6
SHA512

8f86f4ae8bf5ce3f2472fd134fb897ea0be2d3b6a7cd7ecc8cad1924265ac9f22d5ab67e9c1dec05c59db8f09286d8b5edcfafa3e0af2a22c6ceeca77d147a7b
SSDEEP

12288:GNxiRoXSegy/4PjnWr01p5jjdym1hhQTSB:GNxiR0j/YjnWY/zhhQTE

Score

N/A

Malware Config

Signatures

Files

63633cbfcf93959eb3e11d6f6b255b028e77ee96c27ea2b23b38d3646f780fa6
.exe windows x86

3e7a1ac698f5650d99fbe41245d5c5b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetCurrentDirectoryW
lstrcpyW
CreateFileW
SetEndOfFile
WriteConsoleW
GetStringTypeW
LCMapStringW
HeapReAlloc
LoadLibraryW
SetFilePointer
ReadFile
MultiByteToWideChar
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapFree
HeapAlloc
OutputDebugStringA
GetLastError
GetProcessHeap
GetProcAddress
LocalAlloc
LocalFree
GetTickCount
Sleep
GlobalAlloc
GlobalLock
GlobalAddAtomA
GlobalUnlock
GlobalDeleteAtom
GlobalFree
GetSystemTime
ExitProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
RaiseException
MulDiv
lstrcmpiA
RtlUnwind
GetCommandLineA
ExpandEnvironmentStringsA

user32

SendDlgItemMessageA
GetLastActivePopup
BeginPaint
GetSysColor
GetClientRect
DrawTextA
EndPaint
ReleaseDC
SetScrollRange
SetScrollPos
GetScrollPos
InvalidateRect
EndDialog
DefWindowProcA
GetMenu
GetMenuItemInfoA
SetMenuItemInfoA
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
CreateMenu
SetMenu
InsertMenuItemA
DrawMenuBar
PostQuitMessage
GetDialogBaseUnits
SetRect
MoveWindow
SetFocus
GetWindow
GetSystemMetrics
GetWindowRect
SetWindowPos
PeekMessageA
DispatchMessageA
PackDDElParam
PostMessageA
SendMessageA
DestroyWindow
WindowFromPoint
GetDlgCtrlID
GetWindowContextHelpId
GetClassNameA
GetWindowTextA
LoadIconA
RegisterClassA
SetWindowTextA
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
GetWindowWord
MessageBoxA
ShowWindow
GetKeyState
SystemParametersInfoA
wsprintfA
GetParent
InflateRect
DrawFocusRect
SetWindowContextHelpId
UnpackDDElParam
FreeDDElParam
CreateWindowExA
GetWindowLongA
SetWindowLongA
GetDlgItem
GetDC
LoadCursorA

gdi32

SetBkColor
GetStockObject
SelectObject
TextOutA
GetTextMetricsA
CreateSolidBrush
SetTextColor
SetBkMode
DeleteObject
ExtTextOutA
GetObjectA
CreateFontIndirectA
CreatePen
Polygon
Rectangle
GetDeviceCaps

oleaut32

VariantClear

odbc32

ord31
ord24
ord9

msacm32

acmDriverDetailsA
acmFormatTagDetailsA
acmDriverClose
acmDriverOpen

shlwapi

StrSpnA

comctl32

ord17

secur32

AcquireCredentialsHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e7a1ac698f5650d99fbe41245d5c5b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

odbc32

msacm32

shlwapi

comctl32

secur32

advapi32

Sections

.text Size: 386KB - Virtual size: 385KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 386KB - Virtual size: 385KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 6KB - Virtual size: 5KB