1a82c14e13b4e3b7173581bbcf91aba9921b0dc381b6870679c327c99e6df2af

Sharing

Copy URL Twitter E-mail

General

Target

1a82c14e13b4e3b7173581bbcf91aba9921b0dc381b6870679c327c99e6df2af
Size

86KB
MD5

7bf7d58955aede67ab1b624a5e78a491
SHA1

3619ac47f388a9cff696251eae3b51da564a035d
SHA256

1a82c14e13b4e3b7173581bbcf91aba9921b0dc381b6870679c327c99e6df2af
SHA512

38c41290ac336956b20c009b737256d3cc3690fb8dc84c63b6bd022694f7c517d2f8488610b47353681e933fe61dce34c01e27a8e2cbd2ad19a19f0054217afc
SSDEEP

1536:rsG/pmcgu6kMlKjAgxHkGVBQx/rcwCE8SP:r5Q/u6kmC77jQxTcpSP

Score

N/A

Malware Config

Signatures

Files

1a82c14e13b4e3b7173581bbcf91aba9921b0dc381b6870679c327c99e6df2af
.exe windows x86

ac6c15d31c3dc34aa75b9ed6f458c675

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
LeaveCriticalSection
EnterCriticalSection
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
GlobalLock
InterlockedExchange
GetVersionExW
IsWow64Process
OpenProcess
Sleep
GetExitCodeProcess
CreateProcessW
GetModuleHandleW
ReadFile
GetModuleFileNameW
CreateFileW
GetSystemTime
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
WideCharToMultiByte
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
VirtualFree
VirtualProtect
VirtualAlloc
CreateThread
GetTickCount
LoadLibraryA
SetThreadPriority
SetPriorityClass
GetCurrentProcess
TerminateProcess
WriteFile
CloseHandle
ReleaseMutex
GetProcAddress
GetLastError
LoadLibraryW
CreateMutexA
HeapCreate
GetStdHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemTimeAsFileTime
HeapAlloc
GetSystemInfo
VirtualQuery
HeapFree
ExitProcess
DecodePointer
RaiseException

user32

LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
SystemParametersInfoW
GetSystemMetrics
CreateWindowExW
SetCursor
GetSysColorBrush
EndPaint
BeginPaint
DefWindowProcW
GetWindowTextW
SetWindowTextW
RegisterClassExW

gdi32

GetObjectW
CreateCompatibleDC
SetDIBColorTable
DeleteDC
LineTo
MoveToEx
CreatePen
TextOutW
SelectObject
BitBlt
CreateFontA
DeleteObject
SetBkMode
SetTextColor
CreateDIBSection

shlwapi

StrCmpW
StrCpyW

gdiplus

GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdiplusStartup

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac6c15d31c3dc34aa75b9ed6f458c675

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

gdiplus

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 5KB