0fb409e49d07d185f56e5ffe0e5f7c1e3cf16c422e41ea82a9b07502f7dd73c4

Sharing

Copy URL Twitter E-mail

General

Target

0fb409e49d07d185f56e5ffe0e5f7c1e3cf16c422e41ea82a9b07502f7dd73c4
Size

64KB
MD5

604a928386f07a4a74dc1e883bcfdab0
SHA1

9fcde92e5dd7440db86671277743897e69bbafc2
SHA256

0fb409e49d07d185f56e5ffe0e5f7c1e3cf16c422e41ea82a9b07502f7dd73c4
SHA512

e11ca59829409c52e0c2a5030d32f1896d7d0d44449070047d5d847c3449edb585e74d12079bc06059795da35307db2b4d9ed5499f971e4f2f21d38c8d314253
SSDEEP

1536:MUcMvDMrTDJqalwcAyItUiVwBxfu0l6cbk3rpL2CrCyi:xcMEPJaclOuBxfu9l3i

Score

N/A

Malware Config

Signatures

Files

0fb409e49d07d185f56e5ffe0e5f7c1e3cf16c422e41ea82a9b07502f7dd73c4
.exe windows x86

1e9b41194959a9ed1606aff74f41327a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
RegEnumValueA
LookupAccountNameW
RegCreateKeyExW
RegDeleteKeyW
RegCreateKeyExA
AccessCheckByTypeResultListAndAuditAlarmByHandleW
RegOpenKeyExW
RegQueryValueExW
AccessCheckByTypeAndAuditAlarmA
RegSetValueExW
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

comctl32

DSA_GetItemPtr
ImageList_AddMasked
CreateToolbar
GetEffectiveClientRect
ImageList_GetImageInfo
ImageList_Remove
CreateMappedBitmap
MenuHelp
ImageList_LoadImageA

ole32

CoDisconnectObject
CLIPFORMAT_UserMarshal
CLSIDFromProgIDEx
CLIPFORMAT_UserFree
CLSIDFromOle1Class
CLIPFORMAT_UserUnmarshal
CLSIDFromProgID
PropVariantChangeType
BindMoniker
CLIPFORMAT_UserSize
CoCreateInstance

kernel32

QueryPerformanceCounter
CloseHandle
GetProcAddress
EnterCriticalSection
LocalFree
CommConfigDialogA
InterlockedIncrement
GetCurrentProcessId
FindResourceW
TerminateProcess
DeleteCriticalSection
UnhandledExceptionFilter
LoadLibraryA
SetUnhandledExceptionFilter
MultiByteToWideChar
FreeLibrary
Sleep
SetLastError
VirtualAlloc
GetCurrentThreadId
FindResourceExA
GetTickCount
GetLastError
LeaveCriticalSection
GetCurrentProcess
InitializeCriticalSection
ExitProcess
WideCharToMultiByte
FindResourceExW
GetSystemTimeAsFileTime

user32

GetParent
CharNextA
MoveWindow
GetWindowRect
ArrangeIconicWindows
ReleaseDC
GetDC
EnableWindow
AnimateWindow
TranslateMessage
GetSystemMetrics
ShowWindow
GetClientRect
LoadStringW
GetDlgItem
EndDialog
MessageBoxA
BeginPaint

Sections

.textbss
Size: - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e9b41194959a9ed1606aff74f41327a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

ole32

kernel32

user32

Sections

.textbss Size: - Virtual size: 388KB

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 334KB - Virtual size: 334KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 37KB - Virtual size: 36KB

.textbss
Size: - Virtual size: 388KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 334KB - Virtual size: 334KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 37KB - Virtual size: 36KB