d6d9d23461a47dd9f457d7ecc64f36f244f1302fb5b2fc8a1f99b6f37a7c84a7

Sharing

Copy URL Twitter E-mail

General

Target

d6d9d23461a47dd9f457d7ecc64f36f244f1302fb5b2fc8a1f99b6f37a7c84a7
Size

341KB
MD5

a0706d5b471b1166f1a284aefdadddf9
SHA1

d39b827889056a95d46402c728127c092631f37e
SHA256

d6d9d23461a47dd9f457d7ecc64f36f244f1302fb5b2fc8a1f99b6f37a7c84a7
SHA512

7376bf90df9b7e9264de49232ce1a291e79b64ad36ee381897f6a0f8afddb699cddbd92416696fec3a19bf7c659ee99daf965be183a14aaa04296bf28eab4cc0
SSDEEP

6144:N2d+YspFM5iR5O275gzfkvS7m/rCUVKFMtD2gFd9:N2dcFj5O26zMF/eUVFtbFf

Score

N/A

Malware Config

Signatures

Files

d6d9d23461a47dd9f457d7ecc64f36f244f1302fb5b2fc8a1f99b6f37a7c84a7
.exe windows x86

5030d61e9c3e38af180e48f624a82c3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

CreateFileW
GetStringTypeW
LCMapStringW
SetStdHandle
SetFilePointer
MultiByteToWideChar
WriteConsoleW
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
lstrcpyA
GetCPInfo
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryW
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
CloseHandle
LoadLibraryA
GetProcAddress
SetLastError
GetLastError
GlobalUnlock
GetACP
lstrcatA
WriteFile
IsBadReadPtr
GlobalLock
CreateFileA
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
DeleteCriticalSection
ExitProcess
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
EncodePointer
GetModuleFileNameW
GetStdHandle
DecodePointer
GetModuleHandleW
IsProcessorFeaturePresent
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW

user32

ReleaseDC
GetDlgItem
GetWindowLongA
DefWindowProcA
GetDesktopWindow
EndDeferWindowPos
SetWindowTextA
BeginDeferWindowPos
MessageBoxW
DeferWindowPos
ShowScrollBar
CreatePopupMenu
ShowWindow
GetWindow
CreateWindowExA
EndPaint
InvalidateRect
DestroyWindow
SetTimer
SetActiveWindow
PostQuitMessage
GetClientRect
GetWindowTextLengthA
SendMessageA
BeginPaint
GetDC
GetWindowTextA
SetWindowLongA
GetCursorPos

gdi32

GetFontLanguageInfo
CreateDCA
DeleteObject
CreateCompatibleDC
FillRgn
EnumFontFamiliesA
GetStockObject
CreateSolidBrush
GetDeviceCaps

advapi32

OpenTraceA
CryptImportKey
ProcessTrace

ole32

ReleaseStgMedium
CoUninitialize
CoInitializeEx
OleGetClipboard
CoGetInterfaceAndReleaseStream
CoInitialize
CoCreateInstance

oleaut32

OleCreatePropertyFrame

crypt32

CryptHashCertificate

shlwapi

PathAppendA
PathRemoveFileSpecA
PathFileExistsW
PathIsRelativeW
PathCompactPathA

xmllite

CreateXmlReader

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relob
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5030d61e9c3e38af180e48f624a82c3f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

crypt32

shlwapi

xmllite

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 3KB - Virtual size: 11KB

.ddata Size: 118KB - Virtual size: 118KB

.relob Size: 75KB - Virtual size: 74KB

.bdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 3KB - Virtual size: 11KB

.ddata
Size: 118KB - Virtual size: 118KB

.relob
Size: 75KB - Virtual size: 74KB

.bdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 5KB - Virtual size: 4KB