f442af30e1e4d22ecafa6f4da6a9bfedb0461173beeab8331433feaf0f1585b2

Sharing

Copy URL Twitter E-mail

General

Target

f442af30e1e4d22ecafa6f4da6a9bfedb0461173beeab8331433feaf0f1585b2
Size

470KB
MD5

6b55d89ab229be211fdaed508285b100
SHA1

6a7662b6d56fea862a51f77ab9904124363c3ab6
SHA256

f442af30e1e4d22ecafa6f4da6a9bfedb0461173beeab8331433feaf0f1585b2
SHA512

f5710564cd1b548747d809c58003413f5a47d6e59439ce49b28f546693c3e5741a50debaa7dc795c1a07f49c897c86dc10dbb16e694c8572f13123497d078c8a
SSDEEP

6144:e79qk4OFSJRb7EGLj5YlTh84Vl3/dVrusYifGo55kmm3h3r4WpsVJNL60:WF8RbLQ8ihdMsJfGuVO7NpsV760

Score

N/A

Malware Config

Signatures

Files

f442af30e1e4d22ecafa6f4da6a9bfedb0461173beeab8331433feaf0f1585b2
.exe windows x64

fb7a7011b00a7c37542cb74c7467e5cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA

kernel32

HeapSetInformation
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
GetProcAddress
OutputDebugStringA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadResource
SizeofResource
LockResource
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
MulDiv
QueryPerformanceFrequency
GetTickCount

user32

SetCursor
ScreenToClient
GetMessageW
PostQuitMessage
FillRect
PostMessageW
DrawTextW
KillTimer
LoadCursorW
GetClientRect
SetRectEmpty
BeginPaint
TranslateMessage
LoadIconW
SetRect
UnionRect
InvalidateRect
SystemParametersInfoW
PeekMessageW
OffsetRect
IntersectRect
LoadStringW
GetSystemMetrics
EndPaint
SetTimer
DispatchMessageW
EnumDisplaySettingsW
DefWindowProcW
AdjustWindowRect
UpdateWindow
RegisterClassW
SystemParametersInfoA
MessageBoxW
CreateWindowExW
SetWindowPos

msvcrt

??3@YAXPEAX@Z
??2@YAPEAX_K@Z
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
atan2f
_finite
srand
iswdigit
qsort
_atoi64
_vsnwprintf
rand
time
cosf
sinf
acosf
memset
memcpy
sqrtf

comctl32

InitCommonControlsEx
ord344

ole32

CoInitializeEx
CoUninitialize

gdi32

SetTextColor
SetBkColor
GetStockObject
SelectObject
ExcludeClipRect
GetDeviceCaps
DeleteObject
CreateFontW

d3d9

Direct3DCreate9

winmm

timeGetTime

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb7a7011b00a7c37542cb74c7467e5cf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

comctl32

ole32

gdi32

d3d9

winmm

Sections

.text Size: 155KB - Virtual size: 155KB

.data Size: 31KB - Virtual size: 43KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 240KB - Virtual size: 464KB

.text
Size: 155KB - Virtual size: 155KB

.data
Size: 31KB - Virtual size: 43KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 240KB - Virtual size: 464KB