fb6d9917e9824db0d97c440fe9abb748246db12b16a690648a9e24b9e708e12c

Sharing

Copy URL Twitter E-mail

General

Target

fb6d9917e9824db0d97c440fe9abb748246db12b16a690648a9e24b9e708e12c
Size

612KB
MD5

800b9aed90acd7072a42832c7c6a1be0
SHA1

9a6901b88c633107e93ef08fc5b92875e670253b
SHA256

fb6d9917e9824db0d97c440fe9abb748246db12b16a690648a9e24b9e708e12c
SHA512

27dbe0b44cf911c8886b76e0c440dc7f918ac1bec87e367bea3e0bdfcb0d167771731cec0a209d7b60bd0a3efa9daedab8d93b38b547c940a148fd8c5ecff2be
SSDEEP

12288:qGJPkmvqGPnrpuFTQZfWZvY2tC0ewff6faysGn61N:RFkmLfRtMvsgfYabxf

Score

N/A

Malware Config

Signatures

Files

fb6d9917e9824db0d97c440fe9abb748246db12b16a690648a9e24b9e708e12c
.exe windows x86

2fe8205c5e73abbee67663f2eaca9756

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
GetClientRect
DispatchMessageA
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
PostMessageA
SetScrollInfo
SetWindowTextA
SetMenuItemInfoA
ReleaseCapture
LoadStringA
InsertMenuItemA
CharUpperA
RegisterWindowMessageA
ScrollWindow
GetCapture
ShowCursor
CreateCursor
DragDetect
DestroyCursor
SetPropA
AppendMenuA
GetPropA
CreateAcceleratorTableA
RemovePropA
CreateDialogIndirectParamA
FindWindowA
GetMenu
TranslateAcceleratorA

kernel32

VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
EnterCriticalSection
CreateDirectoryA
Sleep
GetCurrentProcess
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetTickCount
UnhandledExceptionFilter
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree

gdi32

CreatePen
CreateFontIndirectA
DeleteObject
GetStockObject

shell32

CommandLineToArgvW

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fe8205c5e73abbee67663f2eaca9756

Headers

File Characteristics

Imports

user32

kernel32

gdi32

shell32

Sections

.text Size: 504KB - Virtual size: 503KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 44KB - Virtual size: 46KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 504KB - Virtual size: 503KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 44KB - Virtual size: 46KB

.rsrc
Size: 10KB - Virtual size: 10KB