0dc986721ee2a9f2e30faea4b74bc5746a53479223dd80aa8278c4c3985084cd

Sharing

Copy URL Twitter E-mail

General

Target

0dc986721ee2a9f2e30faea4b74bc5746a53479223dd80aa8278c4c3985084cd
Size

378KB
MD5

02ce0d607be34507ea4bd435b4914231
SHA1

f5397abf3cf70d1a2bfbf152c9c68b725eff034f
SHA256

0dc986721ee2a9f2e30faea4b74bc5746a53479223dd80aa8278c4c3985084cd
SHA512

adaee9febf74e024efe1b086c50247c3d609a1f676637cfbc1ef65d2c98247c7cabb2c76d635d422aa51af55797902092bdc4a31f9819467d7ac0eb14ce3fb2f
SSDEEP

6144:URsxG1pKAh2YZmtugRTKczwzf9opWYPzm5TXCYViDeT6yGMTC+7wMgsnlRz4088k:U2ipKAUY0tugNLKmpnPzsTXCJyT4oeM1

Score

N/A

Malware Config

Signatures

Files

0dc986721ee2a9f2e30faea4b74bc5746a53479223dd80aa8278c4c3985084cd
.exe windows x86

aa19568ae047b62a3af610da84b2678b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleHandleA
GetComputerNameA
GetCurrentThread
LocalAlloc
VirtualAlloc
GetStdHandle
CreateSemaphoreA
GetEnvironmentStrings
CreateMutexA
GetVersionExA
GetLastError
GetCurrentProcessId
GlobalAlloc
ExitProcess
SetLastError
SetFilePointerEx
DeleteFileW
LockResource
GetStartupInfoW
SetFilePointer
CreateEventW
FindNextFileW
GetVersionExW
InterlockedCompareExchange
WriteConsoleW
GetLocaleInfoA
GlobalFree
GetModuleHandleW
FindCloseChangeNotification
GlobalLock
LCMapStringA
CreateFileMappingA
Sleep
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapAlloc
SetEnvironmentVariableA
FatalAppExitA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

user32

GetParent
GetWindowDC
GetWindowTextLengthW
GetWindowTextA
EndPaint
SetForegroundWindow
SetWindowPos
SendMessageA
GetClientRect
GetWindowRect
SetTimer
GetDCEx
SetRectEmpty
IsWindowEnabled
SetCursor
EnableWindow
GetMenuItemCount
DestroyWindow
GetSysColorBrush
GetWindowThreadProcessId
InvalidateRect
SetMenuContextHelpId
ReleaseDC

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 301KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa19568ae047b62a3af610da84b2678b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 301KB - Virtual size: 335KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 301KB - Virtual size: 335KB

.rsrc
Size: 19KB - Virtual size: 19KB