298b2d3173d7daaf9cffb08a9df90543405e87bcf50aa4265791fa1911d17bc2

Sharing

Copy URL

Twitter E-mail

General

Target

298b2d3173d7daaf9cffb08a9df90543405e87bcf50aa4265791fa1911d17bc2
Size

442KB
MD5

960b345e2cdd7a5c1e7dab584df5bda3
SHA1

829adbaabd2be566711de591c5479daa86bc8a90
SHA256

298b2d3173d7daaf9cffb08a9df90543405e87bcf50aa4265791fa1911d17bc2
SHA512

6b3591424c19e3165460578be3c818b24cacdbf4edbebe07f7c26183e65d2d86dd53b12a944ecbb9bf90e1b147bf3398c77f1dfa0ae58cc97f2eef0ba8118892
SSDEEP

12288:GNxiRoXSegy/4PjnWr01p5jjdym1hhQTSl:GNxiR0j/YjnWY/zhhQTs

Score

N/A

Malware Config

Signatures

Files

298b2d3173d7daaf9cffb08a9df90543405e87bcf50aa4265791fa1911d17bc2
.exe windows x86

3e7a1ac698f5650d99fbe41245d5c5b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetCurrentDirectoryW
lstrcpyW
CreateFileW
SetEndOfFile
WriteConsoleW
GetStringTypeW
LCMapStringW
HeapReAlloc
LoadLibraryW
SetFilePointer
ReadFile
MultiByteToWideChar
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapFree
HeapAlloc
OutputDebugStringA
GetLastError
GetProcessHeap
GetProcAddress
LocalAlloc
LocalFree
GetTickCount
Sleep
GlobalAlloc
GlobalLock
GlobalAddAtomA
GlobalUnlock
GlobalDeleteAtom
GlobalFree
GetSystemTime
ExitProcess
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
RaiseException
MulDiv
lstrcmpiA
RtlUnwind
GetCommandLineA
ExpandEnvironmentStringsA

user32

SendDlgItemMessageA
GetLastActivePopup
BeginPaint
GetSysColor
GetClientRect
DrawTextA
EndPaint
ReleaseDC
SetScrollRange
SetScrollPos
GetScrollPos
InvalidateRect
EndDialog
DefWindowProcA
GetMenu
GetMenuItemInfoA
SetMenuItemInfoA
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
CreateMenu
SetMenu
InsertMenuItemA
DrawMenuBar
PostQuitMessage
GetDialogBaseUnits
SetRect
MoveWindow
SetFocus
GetWindow
GetSystemMetrics
GetWindowRect
SetWindowPos
PeekMessageA
DispatchMessageA
PackDDElParam
PostMessageA
SendMessageA
DestroyWindow
WindowFromPoint
GetDlgCtrlID
GetWindowContextHelpId
GetClassNameA
GetWindowTextA
LoadIconA
RegisterClassA
SetWindowTextA
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
GetWindowWord
MessageBoxA
ShowWindow
GetKeyState
SystemParametersInfoA
wsprintfA
GetParent
InflateRect
DrawFocusRect
SetWindowContextHelpId
UnpackDDElParam
FreeDDElParam
CreateWindowExA
GetWindowLongA
SetWindowLongA
GetDlgItem
GetDC
LoadCursorA

gdi32

SetBkColor
GetStockObject
SelectObject
TextOutA
GetTextMetricsA
CreateSolidBrush
SetTextColor
SetBkMode
DeleteObject
ExtTextOutA
GetObjectA
CreateFontIndirectA
CreatePen
Polygon
Rectangle
GetDeviceCaps

oleaut32

VariantClear

odbc32

ord31
ord24
ord9

msacm32

acmDriverDetailsA
acmFormatTagDetailsA
acmDriverClose
acmDriverOpen

shlwapi

StrSpnA

comctl32

ord17

secur32

AcquireCredentialsHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e7a1ac698f5650d99fbe41245d5c5b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

odbc32

msacm32

shlwapi

comctl32

secur32

advapi32

Sections

.text Size: 386KB - Virtual size: 385KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 386KB - Virtual size: 385KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 6KB - Virtual size: 5KB