2e5c42ef1db5f9e4ed06fcc1d549307201c668823f71a37d03a37de4f440a048

Sharing

Copy URL Twitter E-mail

General

Target

2e5c42ef1db5f9e4ed06fcc1d549307201c668823f71a37d03a37de4f440a048
Size

488KB
MD5

6825f97b886e39fc8238efe956c5ddd0
SHA1

5200741734bada364bea6472fbbba7ea927fa487
SHA256

2e5c42ef1db5f9e4ed06fcc1d549307201c668823f71a37d03a37de4f440a048
SHA512

ddc6321fb3098aeb2bd8e288e37620abdeae012576534aacee51c773c6e589e2bcaf27c602f4d123f00d64b35d72b74d3efc4949666f752628e66022388d6944
SSDEEP

6144:YziI4kc5pN0MelRQpEVrNrVwnxO7ifseQyy08rM/f7:6TV7SpqrlVwnxOPeDy08Ef7

Score

N/A

Malware Config

Signatures

Files

2e5c42ef1db5f9e4ed06fcc1d549307201c668823f71a37d03a37de4f440a048
.exe windows x86

f5772aa81d652a3df3aefd9bdec5f691

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

CreateFileW
CloseHandle
WriteConsoleW
SetStdHandle
FlushFileBuffers
HeapReAlloc
LoadLibraryW
GetConsoleMode
WideCharToMultiByte
SetFilePointer
HeapSize
Sleep
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetLastError
GetCommandLineA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
CreateFileA
HeapCreate
GetCurrentProcessId
GetConsoleTitleA
GetTickCount
SetConsoleTitleA
lstrlenW
HeapAlloc
FindFirstChangeNotificationA
WaitForSingleObject
FindCloseChangeNotification
GetModuleHandleA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
GetConsoleCP
ExitProcess
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle

user32

SendDlgItemMessageW
GetDlgItem
SendMessageA
InvalidateRect
GetMenuItemCount
GetMenuItemID
GetCursorInfo
SetScrollInfo
MessageBoxW
LoadMenuA
SetMenu
wsprintfA
SetTimer
FindWindowA
GetWindowThreadProcessId
FindWindowExW
GetWindowTextW
FindWindowExA
KillTimer
DefWindowProcA
GetDC
ModifyMenuA

gdi32

DescribePixelFormat
SetPixelFormat
GetDIBColorTable
CreateFontIndirectA
DeleteObject
GetStockObject
GetObjectA
EnumFontsA
ChoosePixelFormat

comdlg32

FindTextW
GetOpenFileNameA
ChooseFontA

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
CredEnumerateA

shell32

SHGetFolderPathW
SHGetFolderPathA

ole32

CreateAntiMoniker

shlwapi

PathRemoveArgsA
PathAppendA

comctl32

ord6

opengl32

glEnable
glBlendFunc
glLightfv

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.try
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relov
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lave
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5772aa81d652a3df3aefd9bdec5f691

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

comctl32

opengl32

Sections

.text Size: 321KB - Virtual size: 321KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 12KB

.try Size: 6KB - Virtual size: 5KB

.relov Size: 512B - Virtual size: 332B

.lave Size: 5KB - Virtual size: 4KB

.rsrc Size: 129KB - Virtual size: 129KB

.text
Size: 321KB - Virtual size: 321KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 12KB

.try
Size: 6KB - Virtual size: 5KB

.relov
Size: 512B - Virtual size: 332B

.lave
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 129KB - Virtual size: 129KB