1a923f810fe3a344091dfa92296e9a27b1c414bbe3301189465720218eec3f26

Sharing

Copy URL Twitter E-mail

General

Target

1a923f810fe3a344091dfa92296e9a27b1c414bbe3301189465720218eec3f26
Size

222KB
MD5

1b13f1630c841500516b29b12543c836
SHA1

f00964e18b46614c367d553a87050efaf854cdde
SHA256

1a923f810fe3a344091dfa92296e9a27b1c414bbe3301189465720218eec3f26
SHA512

ba9ffda892974ac4aca238ebb8d1f215a7afac770fe50526a735a5b48da454d6385647b603035cf3eec1baa2370baa82db9dccd1dfe37e005ec29d3ce9044486
SSDEEP

1536:jJHK1FDfg9pvUGo9Vt/InWNV7swS+HIiN6pn1JzLxHtXNDMPRgEXE:jJaZgf7WjswfoiNWjzLxPFEX

Score

N/A

Malware Config

Signatures

Files

1a923f810fe3a344091dfa92296e9a27b1c414bbe3301189465720218eec3f26
.exe windows x86

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
HeapDestroy
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadStringPtrA
IsBadStringPtrW
GetCurrentProcessId
LeaveCriticalSection
LoadLibraryW
LocalFree
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
GetCurrentProcess
GetCommandLineW
FreeLibrary
FormatMessageW
FlushInstructionCache
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CloseHandle
VirtualAllocEx
GetModuleHandleA
GetProcAddress
CreateFileA
IsBadWritePtr
lstrcatA

user32

GetWindowLongW
KillTimer
LoadBitmapW
LoadImageW
LoadStringW
MessageBoxW
MonitorFromRect
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetForegroundWindow
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
GetSysColorBrush
GetMonitorInfoW
GetMessageW
GetClientRect
FindWindowW
EndDialog
DispatchMessageW
DestroyWindow
DefWindowProcW
CreateWindowExW
CharNextW
CallWindowProcW
LoadIconA
DefWindowProcA
LoadIconW
GetSystemMetrics
LoadCursorA

gdi32

DeleteObject
GetStockObject

advapi32

RegOpenKeyA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW

shell32

CommandLineToArgvW

msvcrt

_XcptFilter
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_purecall
_snwprintf
_wcmdln
_wcsicmp
_wcsnicmp
exit
wcscat
wcscmp
wcscpy
wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50efb459da5f83dffda1c665b795a231

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 206KB - Virtual size: 206KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 206KB - Virtual size: 206KB

.rsrc
Size: 5KB - Virtual size: 4KB