00cbbe34b8699521f6ea90a90b64d78b357ef8cb1a8397237155bfda3197e3da

Sharing

Copy URL Twitter E-mail

General

Target

00cbbe34b8699521f6ea90a90b64d78b357ef8cb1a8397237155bfda3197e3da
Size

404KB
MD5

919e0c9fc121b643afbe0c3d0b1d6908
SHA1

1b2fbf7e7d17737cefb181953a8df805c43f764e
SHA256

00cbbe34b8699521f6ea90a90b64d78b357ef8cb1a8397237155bfda3197e3da
SHA512

edad06cbad703c2e4a4d1a218f344996121fe170e96488344fe40686c9ca5ed911c82d0f3b62f915814d592dfa0a01d10a432ecc4b1d5fbba44a41124a470afa
SSDEEP

12288:IzQUu9O1vB8OKB+Wc6dVC/drvJ4CzlUBfmL:IU9O1GO++edV2B4CzlUBG

Score

N/A

Malware Config

Signatures

Files

00cbbe34b8699521f6ea90a90b64d78b357ef8cb1a8397237155bfda3197e3da
.exe windows x86

f98c59ce4b7e305c6d18acba91fdc14d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
MultiByteToWideChar
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
FlushFileBuffers
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
CreateFileW
GetLastError
GetCurrentThread
SetThreadPriority
GetThreadPriority
WriteFile
WaitForSingleObject
CloseHandle
HeapCreate
HeapAlloc
GetProcAddress
GetSystemTimeAsFileTime
EnumSystemCodePagesW
GetNumberOfConsoleInputEvents
SetLastError
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryA
GetEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
IsProcessorFeaturePresent
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
GetModuleHandleW
RtlUnwind
RaiseException
HeapFree

user32

EmptyClipboard
CloseClipboard
EndDialog
GetParent
SetWindowTextA
GetSystemMenu
CopyImage
DestroyMenu
EnableMenuItem
LoadStringA
GetMessageA
InsertMenuA
RegisterClassA
EndPaint
SetClipboardData
GetWindowTextA
GetDC
FillRect
ReleaseDC
OpenClipboard
GetDlgItemTextW
LoadCursorA
CreateMenu
CreateWindowExA
PostThreadMessageA
MessageBoxA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SendMessageA
EnableWindow
CreateDialogParamA
SetDlgItemTextA
DestroyWindow
DestroyAcceleratorTable

gdi32

CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
CreatePalette
StartDocA
StartPage
TextOutA
EndPage
EndDoc
GetTextMetricsA
GetStockObject
PatBlt
CombineTransform

comdlg32

PrintDlgA

advapi32

CryptEnumProviderTypesA

shell32

CommandLineToArgvW

ole32

CoSuspendClassObjects
CoInitialize

psapi

GetProcessMemoryInfo

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

crypt32

CryptEncodeObjectEx

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

gdiplus

GdiplusStartup
GdipFree
GdipAlloc
GdipLoadImageFromFile
GdipDisposeImage
GdipSaveImageToFile
GdipCloneImage
GdiplusShutdown

setupapi

SetupDiGetClassDevsA

powrprof

GetPwrDiskSpindownRange

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f98c59ce4b7e305c6d18acba91fdc14d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

psapi

version

crypt32

rpcrt4

gdiplus

setupapi

powrprof

Sections

.text Size: 322KB - Virtual size: 321KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 38KB - Virtual size: 37KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 322KB - Virtual size: 321KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 38KB - Virtual size: 37KB

.reloc
Size: 8KB - Virtual size: 8KB