c19212083b80e482a9afde7a17bad69cd816e3a84ba2569d60d706ed1f87b1bd

Sharing

Copy URL Twitter E-mail

General

Target

c19212083b80e482a9afde7a17bad69cd816e3a84ba2569d60d706ed1f87b1bd
Size

374KB
MD5

66b330ad899aa052b634f34ce39a5000
SHA1

2f3ea7b655bdb04329604e34365e737109f98cf0
SHA256

c19212083b80e482a9afde7a17bad69cd816e3a84ba2569d60d706ed1f87b1bd
SHA512

d682cf64793c958b3eb5be37a50d7a1a8b0fe78209520709857a4a7fcc65facbd523166c4cb151234fefb2ca97bfc1eb363d7c02d9752180fc9bd2562cbd3d82
SSDEEP

6144:Lz7PSzIl5a2pWk+ewhFtYIUG3voG+8FsFs7GkV3Pvvdo8Ns:LLS7kexYbQeFs7GUPvvd9Ns

Score

N/A

Malware Config

Signatures

Files

c19212083b80e482a9afde7a17bad69cd816e3a84ba2569d60d706ed1f87b1bd
.exe windows x86

0d309371152c9bcdb65465102ddabb3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
ExitWindowsEx
MsgWaitForMultipleObjects
PeekMessageA
SetWindowLongA
TranslateMessage
MessageBoxA
DispatchMessageA
DestroyWindow
CreateWindowExA
CallWindowProcA
CharPrevA
CharNextA
LoadStringA

shell32

SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

ole32

OleInitialize
OleUninitialize
CoCreateInstance

opengl32

glRasterPos4fv
glLighti
glPopName
glEdgeFlag
glTexEnvi
glIndexs
glStencilFunc

dbghelp

MakeSureDirectoryPathExists
SymEnumerateSymbolsW
SymSetSearchPath
SymGetOptions
FindDebugInfoFile

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
HeapSize
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapReAlloc
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
CompareStringW
SetEnvironmentVariableA
CreateFileA
VirtualAlloc
InterlockedIncrement
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleTextAttribute
FindResourceA
GetModuleHandleW
SetComputerNameExW
FindNextVolumeMountPointA
GetVolumeNameForVolumeMountPointW
SetConsoleTitleA
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapFree
Sleep
WideCharToMultiByte
GetTimeZoneInformation
HeapAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d309371152c9bcdb65465102ddabb3d

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

opengl32

dbghelp

comctl32

version

kernel32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 7KB - Virtual size: 18KB

.rsrc Size: 304KB - Virtual size: 304KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 304KB - Virtual size: 304KB