8864765a40664c937392a91ecbf6db41c62889c826798ab2f4d3e344c10043fc

Sharing

Copy URL

Twitter E-mail

General

Target

8864765a40664c937392a91ecbf6db41c62889c826798ab2f4d3e344c10043fc
Size

126KB
MD5

04988d40ad12bacfd435c903efdbd541
SHA1

ec4a753a56e929d550be3877fe80353dcc6404ea
SHA256

8864765a40664c937392a91ecbf6db41c62889c826798ab2f4d3e344c10043fc
SHA512

5ee4f7611ed621fcbcee518af3263f3314d4c014a42e603992b2f54fd7455aabfe31d8572df015f1537c29afc8f2c826d8fe17c9d03cf7cae1e47343a84869e3
SSDEEP

3072:Q3dJzUuLmcXRXH9TQ39QCIBeAfE0DNOQVP9TNZqJXI:id6u/BX9TjCIBeAdEQF9xZqJXI

Score

N/A

Malware Config

Signatures

Files

8864765a40664c937392a91ecbf6db41c62889c826798ab2f4d3e344c10043fc
.exe windows x86

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RegisterFormatEnumerator
URLOpenPullStreamA
URLDownloadToCacheFileW

wininet

RetrieveUrlCacheEntryFileA
InternetFindNextFileA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExW
InternetReadFile

gdi32

Chord
AddFontMemResourceEx
CreateDCA
AddFontResourceA
ColorMatchToTarget
AngleArc

crypt32

CryptGetAsyncParam
CertIsValidCRLForCertificate
CryptMsgClose
CryptMsgControl
CertAddCertificateContextToStore
CryptEnumKeyIdentifierProperties

mpr

WNetGetConnectionW
WNetAddConnectionA
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetGetLastErrorA
WNetGetLastErrorW

kernel32

LoadLibraryW
RtlUnwind
HeapReAlloc
HeapSize
GetOEMCP
Sleep
HeapFree
EnterCriticalSection
LeaveCriticalSection
CopyFileExW
DeleteTimerQueue
VerLanguageNameA
FindFirstChangeNotificationW
GetHandleInformation
WriteProcessMemory
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
HeapAlloc
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

wininet

gdi32

crypt32

mpr

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 86KB - Virtual size: 124KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 86KB - Virtual size: 124KB