9bdeec1d59cbf88f461ef8904d17030f4e7e1b0a4a1cc54fe199ab3d25546a73

Sharing

Copy URL Twitter E-mail

General

Target

9bdeec1d59cbf88f461ef8904d17030f4e7e1b0a4a1cc54fe199ab3d25546a73
Size

74KB
MD5

d3704a3c8d7b033875936b7ef2dbe7bf
SHA1

d2f27bd73809de132febffdc687a5bf483ba7a9c
SHA256

9bdeec1d59cbf88f461ef8904d17030f4e7e1b0a4a1cc54fe199ab3d25546a73
SHA512

e892c7855a6c741bac40b1e79d3a95a916535a80534a631215e61e4182a42eaca8af0a50e61df3d50bbecfe764c6b2027ca5b8c8e89bc19fb8a3555dd5df3cf6
SSDEEP

1536:HvYYpktZ4EwuDkrpkmQW+opLe8o3mqvoBcRYNXHXrNaacm3Mo:PYYKnNmQW+uLhRNXHXrNaacm8o

Score

N/A

Malware Config

Signatures

Files

9bdeec1d59cbf88f461ef8904d17030f4e7e1b0a4a1cc54fe199ab3d25546a73
.exe windows x86

f23f0cbf18b0aec3bcd2c88065919207

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawTextA
TranslateMessage
GetMessageA
RegisterClassExA
LoadCursorA
EndDialog
SendMessageA
SetFocus
PostMessageA
DialogBoxParamA
DestroyWindow
BeginPaint
DispatchMessageA
EndPaint
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
Sleep
WriteProcessMemory
CreateDirectoryA
LoadLibraryA
GetModuleHandleA
lstrcpyA
GetCurrentDirectoryA
GetLocaleInfoA
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent

comctl32

ord17

wtsapi32

WTSLogoffSession
WTSEnumerateProcessesA
WTSWaitSystemEvent
WTSQuerySessionInformationA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f23f0cbf18b0aec3bcd2c88065919207

Headers

File Characteristics

Imports

user32

kernel32

comctl32

wtsapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 11KB - Virtual size: 15KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 11KB - Virtual size: 15KB

.rsrc
Size: 21KB - Virtual size: 21KB