0c98d3c2ea3e12977181f3b22e9cbcfb831e7e31c509ee674ce384c0832cc245

Sharing

Copy URL

Twitter E-mail

General

Target

0c98d3c2ea3e12977181f3b22e9cbcfb831e7e31c509ee674ce384c0832cc245
Size

471KB
MD5

a02c19490fbb1f2aaf954a8a51fe30b1
SHA1

f69654ced514a645725b97cf0f49af7b820de0f7
SHA256

0c98d3c2ea3e12977181f3b22e9cbcfb831e7e31c509ee674ce384c0832cc245
SHA512

5873ec0faa8514038f5e65c1dcc8fb8269d50f161aa8221c30764c67f68954cbadda184773e5469682003dda56c15813de5dee827f4390b8999dfe216f18b0b9
SSDEEP

12288:ZxZdWfDQYjCq/7ijMBmCjkVcNB08ZAWvDDQ:ZSQACq/uwmCgGNq8LDQ

Score

N/A

Malware Config

Signatures

Files

0c98d3c2ea3e12977181f3b22e9cbcfb831e7e31c509ee674ce384c0832cc245
.exe windows x86

f306356d840f2430544d8e8921f9b5ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
FlushFileBuffers
SetStdHandle
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetCPInfo
HeapCreate
CreateFileA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LCMapStringW
GetStringTypeW
CreateFileW
SetEndOfFile
GetProcessHeap
RaiseException
CompareStringW
GetLastError
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetErrorMode
GetVolumeInformationA
ExitProcess
GetProcAddress
LoadLibraryA
MultiByteToWideChar
HeapAlloc
GetCurrentThread
GetCurrentProcess
SetLastError
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
GetTimeZoneInformation
DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetModuleFileNameW
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
HeapValidate
IsBadReadPtr
ReadFile
CloseHandle
InitializeCriticalSectionAndSpinCount
RtlUnwind
QueryPerformanceCounter
SetEnvironmentVariableA

user32

SetClipboardData
LoadIconA
SendDlgItemMessageA
SendMessageA
RegisterClassA
LoadCursorA
GetFocus
GetKeyboardLayout
LoadBitmapW
LoadBitmapA
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
DefWindowProcA
GetSysColor
ReleaseDC
BeginPaint
GetSysColorBrush
EndPaint
EmptyClipboard
CopyImage
DrawIconEx
CloseClipboard
MessageBoxA
GetWindowDC
IsWindowEnabled
InsertMenuItemA
GetWindowRect
ClientToScreen
wsprintfA
EnumDesktopsA
GetDlgItem
GetDC
SystemParametersInfoA
GetClientRect
CheckDlgButton
SetDlgItemInt

gdi32

CreateCompatibleBitmap
GetStockObject
CreateCompatibleDC
CombineRgn
DeleteObject
CreatePen
Polyline
SelectObject
PatBlt
DeleteDC
CreateRectRgn

advapi32

OpenProcessToken
OpenThreadToken
GetTokenInformation

shell32

SHGetFileInfoA

ole32

PropVariantClear
CoCreateInstance
CoUninitialize
CoInitialize

winmm

midiStreamOpen

shlwapi

SHDeleteKeyA
PathCommonPrefixA
PathCanonicalizeA

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Add
ImageList_ReplaceIcon
ord17

imm32

ImmGetOpenStatus
ImmSetOpenStatus
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.safe
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loca
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.true
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f306356d840f2430544d8e8921f9b5ed

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

shlwapi

comctl32

imm32

Sections

.text Size: 182KB - Virtual size: 181KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 5KB - Virtual size: 13KB

.safe Size: 101KB - Virtual size: 100KB

.zdata Size: 39KB - Virtual size: 39KB

.loca Size: 26KB - Virtual size: 25KB

.true Size: 35KB - Virtual size: 34KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 182KB - Virtual size: 181KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 5KB - Virtual size: 13KB

.safe
Size: 101KB - Virtual size: 100KB

.zdata
Size: 39KB - Virtual size: 39KB

.loca
Size: 26KB - Virtual size: 25KB

.true
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 18KB - Virtual size: 18KB