5c9da2b9c294f0bbb02336ce230741d7c8816cd018799b00c9169c786bc09e8a

Sharing

Copy URL Twitter E-mail

General

Target

5c9da2b9c294f0bbb02336ce230741d7c8816cd018799b00c9169c786bc09e8a
Size

1.7MB
MD5

50838949fe62b4d13fa11be2102fc6ee
SHA1

2a5611608663e5b558f66795b56e8c30339fd4a1
SHA256

5c9da2b9c294f0bbb02336ce230741d7c8816cd018799b00c9169c786bc09e8a
SHA512

320641949ea4e7c924b079f71724dd9c4b91c3879067d969c4e3e341282eff9dcfa20b52b5ec7dd8ae82caf2119663e8a3019962dcf89adc095e76edc298a5d0
SSDEEP

6144:sxh6JLir5xN9JBY31iQKmgn8m64f4M1/USn8:uh6JLmN9JBYliQFgn8m6hMZUX

Score

N/A

Malware Config

Signatures

Files

5c9da2b9c294f0bbb02336ce230741d7c8816cd018799b00c9169c786bc09e8a
.exe windows x86

c2963572747db2fcfa1c66b87d16c245

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
CreateCompatibleDC
CreateDIBitmap
CreatePalette
DeleteDC
DeleteObject
ExtTextOutW
GetGraphicsMode
GetObjectW
RealizePalette
SelectObject
SelectPalette

kernel32

VirtualAlloc
AssignProcessToJobObject
CloseHandle
CommConfigDialogW
FillConsoleOutputCharacterW
FindResourceW
FreeLibrary
LoadResource
LockResource
ReleaseMutex
SetFileTime
SizeofResource
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
RaiseException
HeapFree
SetFilePointer
SetHandleCount
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
RtlUnwind
GetLocaleInfoW
GetLocaleInfoA
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
CreateFileA
FlushFileBuffers
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

oleaut32

VarUI4FromI2

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c2963572747db2fcfa1c66b87d16c245

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

oleaut32

Sections

.text Size: 179KB - Virtual size: 179KB

.rdata Size: 324KB - Virtual size: 323KB

.data Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 179KB - Virtual size: 179KB

.rdata
Size: 324KB - Virtual size: 323KB

.data
Size: 1.2MB - Virtual size: 1.2MB