ff911e64318a644ae15fdf083dd17109491508849ccbb06350e4cca12d3326b5

Sharing

Copy URL Twitter E-mail

General

Target

ff911e64318a644ae15fdf083dd17109491508849ccbb06350e4cca12d3326b5
Size

242KB
MD5

a058fa5ea5e0aec0437b50cd1a0cec60
SHA1

195af1ef58feb084c6c5471510eae489ce83d124
SHA256

ff911e64318a644ae15fdf083dd17109491508849ccbb06350e4cca12d3326b5
SHA512

1dadc94c3c68e08625eb690f35fbc542212aba87c096cacea68ffc1aadb3774fb70b4fd5187d5525deaeb0b534711e3afb22050ff9323d1ad7d110cf1039d972
SSDEEP

6144:G/FzZ+fUbF49auzHkpT+SSHPr+L7pudkCvgKxqlmW+:2N+fgFuvzHkpTkPedukClqU

Score

N/A

Malware Config

Signatures

Files

ff911e64318a644ae15fdf083dd17109491508849ccbb06350e4cca12d3326b5
.exe windows x86

c53ead9ecaabb6de414ae7935a947137

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
MultiByteToWideChar
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetLastError
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleW
SetStdHandle
lstrcpyA
LoadLibraryA
CloseHandle
SetHandleCount
GetProcAddress
SetThreadPriority
CreateFileW
GetFileAttributesW
GetCurrentThread
GetCurrentProcess
HeapAlloc
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetModuleFileNameA
HeapFree
HeapSize
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue

user32

MoveWindow
PostQuitMessage
IsZoomed
LoadBitmapA
LoadMenuA
GetClientRect
SendMessageA
GetDC
GetMenu
InvalidateRect
ReleaseDC
GetDlgItem
ScrollWindow
DefWindowProcA
RedrawWindow
GetSysColor
CreatePopupMenu
WindowFromDC
AppendMenuA
IsWindow
GetSystemMetrics
IsWindowVisible
CloseWindow
UpdateWindow
SetScrollInfo
GetScrollPos
GetWindow

gdi32

SetWindowOrgEx
BitBlt
ExtFloodFill
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
GetTextMetricsA
CreateSolidBrush
MoveToEx

comdlg32

GetFileTitleW

ws2_32

WSAStartup

comctl32

ord17

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 153KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c53ead9ecaabb6de414ae7935a947137

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ws2_32

comctl32

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 153KB - Virtual size: 178KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 153KB - Virtual size: 178KB

.rsrc
Size: 1KB - Virtual size: 1KB