5cfbe9826a021c69cfa4173787560651165be5c1e81b3d2d0dfe9f5ec937a20d

Sharing

Copy URL Twitter E-mail

General

Target

5cfbe9826a021c69cfa4173787560651165be5c1e81b3d2d0dfe9f5ec937a20d
Size

172KB
MD5

9637346da44c355d184fcd880a08df00
SHA1

dd350dc03fd84d881ac17349d88513624e0f5522
SHA256

5cfbe9826a021c69cfa4173787560651165be5c1e81b3d2d0dfe9f5ec937a20d
SHA512

b47891b14b99dccac302757dc2ce6c496048acb8e5ef6e3027e1366d4cfb82e7ee7d3bcb55229f262d4617904ab0cda97b0d7ec81ff318005d8604fcbb1ca537
SSDEEP

3072:nAhGxc3sVB75Q+3cA5TBlY6HMHXlqv2voXSNImHSLtuJLomx3I6345jhVN2ExDNP:2Gq3W75Q+3tBlVMHwv4oX2ImH6tso+I7

Score

N/A

Malware Config

Signatures

Files

5cfbe9826a021c69cfa4173787560651165be5c1e81b3d2d0dfe9f5ec937a20d
.exe windows x86

b9ba7ae5369b9c0935cb41a42ac232ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
FindResourceA
DeleteFileA
TlsGetValue
IsBadWritePtr
GlobalHandle
InitializeCriticalSection
GetEnvironmentStringsW
lstrcmpiA
GlobalLock
RaiseException
UnhandledExceptionFilter
ReadFile
GlobalGetAtomNameA
SetHandleCount
FileTimeToSystemTime
GlobalFindAtomA
TlsAlloc
HeapCreate
GetCurrentThreadId
LockFile
HeapSize
TlsFree
LocalFree
VirtualFree
GetVersionExA
GetCommandLineA
WriteFile
LCMapStringW
LockResource
DuplicateHandle
ExitProcess
GetFullPathNameA
GetFileType
FreeLibrary
Sleep
GetDriveTypeA
LocalReAlloc
UnlockFile
SetFilePointer
LoadResource
GlobalFree
SetEnvironmentVariableA
GetCPInfo
GlobalReAlloc
MulDiv
GetStringTypeW
FindClose
LoadLibraryA
SetEndOfFile
CompareStringA
GetStringTypeA
GlobalDeleteAtom
GetCurrentProcess
GetLastError
SetLastError
FreeEnvironmentStringsW
DeleteCriticalSection
GlobalAddAtomA
HeapReAlloc
InterlockedDecrement
GetEnvironmentVariableA
HeapDestroy
GetProcAddress
GetCurrentThread
GlobalFlags
GetStdHandle
GetModuleHandleA
GetFileTime
GetFileSize
HeapFree
GetVersion
GlobalAlloc
IsBadReadPtr
GetEnvironmentStrings
GetACP
MultiByteToWideChar
GlobalUnlock
FindAtomA
GetOEMCP
LoadLibraryExA
VirtualProtect
HeapAlloc
LCMapStringA
TlsSetValue
lstrlenA
FindFirstFileA
GetProcessVersion
FreeEnvironmentStringsA
SetCurrentDirectoryA
FlushFileBuffers
lstrcpynA
InterlockedExchange
InterlockedIncrement
EnterCriticalSection
lstrcmpA
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetModuleFileNameA
lstrcpyA
GetVolumeInformationA
IsBadCodePtr
TerminateProcess
CreateFileA
GetProfileStringA
LeaveCriticalSection
GetFileAttributesA
WideCharToMultiByte
SetStdHandle
SetUnhandledExceptionFilter
SetErrorMode
LocalAlloc
GetStartupInfoA
RtlUnwind
CloseHandle

user32

GetSysColor
DefDlgProcA
AdjustWindowRectEx
SetCursor
CallNextHookEx
GetDC
GetActiveWindow
GetMenu
GetLastActivePopup
EndDialog
SendDlgItemMessageA
MapWindowPoints
ScreenToClient
GetMessageA
SetDlgItemTextA
DispatchMessageA
IsWindowVisible
SendMessageA
CallWindowProcA
GetKeyState
ExcludeUpdateRgn
GetPropA
PostQuitMessage
SetMenuItemBitmaps
GetWindowPlacement
GetSysColorBrush
LoadIconA
GetSubMenu
GetSystemMetrics
LoadBitmapA
MessageBoxA
GetWindowLongA
UpdateWindow
LoadStringA
RegisterClassA
GetWindowDC
IsWindowEnabled
ReleaseDC
RegisterWindowMessageA
GetDlgItem
SetActiveWindow
BeginPaint
GetClassLongA
EnableMenuItem
DefWindowProcA
DestroyMenu
GetCursorPos
EndPaint
SetForegroundWindow
GetMenuItemCount
EnableWindow
GetForegroundWindow
PostMessageA
GetWindowTextA
GetMessagePos
IsIconic
OffsetRect
SetWindowsHookExA
FindWindowA
GetDlgCtrlID
PtInRect
TabbedTextOutA
GetMessageTime
InvalidateRect
GetParent
SystemParametersInfoA
InflateRect
DrawTextA
GrayStringA
AppendMenuA
GetWindow
IntersectRect
GetSystemMenu
PeekMessageA
TranslateMessage
IsWindowUnicode
GetNextDlgTabItem
CreateWindowExA
ValidateRect
RemovePropA
CheckMenuItem
CharUpperA
GetClassInfoA
ModifyMenuA
DrawIcon
GetWindowRect
SetPropA
GetWindowTextLengthA
WinHelpA
DestroyWindow
SetWindowLongA
CharNextA
SetFocus
GetClientRect
wsprintfA
GetCapture
DrawFocusRect
GetMenuItemID
UnhookWindowsHookEx
IsWindow
SetWindowPos
GetMenuCheckMarkDimensions
HideCaret
ShowWindow
UnregisterClassA
GetClassNameA
ShowCaret
GetMenuState
CreateDialogIndirectParamA
SetWindowTextA
GetFocus
ClientToScreen
IsDialogMessageA
LoadCursorA
GetTopWindow
CopyRect

gdi32

SelectObject
CreateDIBitmap
PtVisible
OffsetViewportOrgEx
SetTextColor
SetViewportOrgEx
DeleteObject
SaveDC
SetViewportExtEx
TextOutA
PatBlt
RectVisible
ScaleViewportExtEx
ExtTextOutA
SetWindowExtEx
ScaleWindowExtEx
BitBlt
RestoreDC
SetBkMode
CreateBitmap
IntersectClipRect
GetTextExtentPointA
GetObjectA
SetMapMode
SetBkColor
Escape
CreateCompatibleDC
GetStockObject
DeleteDC
GetDeviceCaps
CreateSolidBrush
GetClipBox

ole32

CoInitialize
CoUninitialize

msvcrt

fprintf
_itoa
_wopen
vfprintf
realloc
__getmainargs
localeconv
strcat
sin
asin
wcsrchr
gmtime
_beginthread
sqrt
fgets
calloc
_umask
_wstat
__set_app_type
log10
memcpy
__p__environ
_errno
modf
_wgetenv
rand
toupper
_read
setlocale
_tzset
free
acos
_wcsdup
sscanf
signal
floor
strncpy
longjmp
fopen
_cexit
mbstowcs
_stati64
tan
frexp
_isctype
_endthreadex
_fstati64
_setmode
memcmp
strtoul
_filelengthi64
getenv
pow
puts
_getdrive
__p__fmode
_vsnprintf
wcsncpy
fflush
memset
_assert
strstr
_open
fread
_wunlink
strerror
strtok
fputs
memchr
atan
wcschr
time
mktime
_wfopen
wcscpy
fseek
fputc
tolower
_strnicmp
ceil
_strdup
_endthread
exp
atan2
_snprintf
_waccess
log
srand
printf
_timezone
_tzname
atof
_iob
wcscmp
_beginthreadex
abort
wcslen
_stricmp
strrchr
bsearch
_close
cos
_onexit
_get_osfhandle
_open_osfhandle
wcstombs
_setjmp
atexit
_pctype
fsetpos
rename
localtime
_lseeki64
system
memmove
strtol
malloc
fclose
wcsncmp
strcpy
fwrite
_flushall
strlen
__mb_cur_max
strncmp
qsort
ctime
exit
_write
sprintf
_clearfp
remove
strcmp
_wrmdir
_wchmod
_stat

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9ba7ae5369b9c0935cb41a42ac232ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msvcrt

Sections

.text Size: 132KB - Virtual size: 132KB

.xdata Size: 11KB - Virtual size: 11KB

.data Size: 9KB - Virtual size: 23KB

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: 132KB - Virtual size: 132KB

.xdata
Size: 11KB - Virtual size: 11KB

.data
Size: 9KB - Virtual size: 23KB

.rsrc
Size: 18KB - Virtual size: 17KB