241c9c7e569d746b0f0fa4eea0a82203506641cc05839822dd4dfe8174835a6b

Sharing

Copy URL Twitter E-mail

General

Target

241c9c7e569d746b0f0fa4eea0a82203506641cc05839822dd4dfe8174835a6b
Size

173KB
MD5

8459e88929e4f9914a59a7efc18674a0
SHA1

7762b5157b808a746c2298e3c520a86eb976acdf
SHA256

241c9c7e569d746b0f0fa4eea0a82203506641cc05839822dd4dfe8174835a6b
SHA512

1dab8308fae60f9c0e7fec51c4e4c80b8c6f46372c19014c708deaf303551ef77dbf9ffaffa78fba7b70fb501ebab32abf7a912d8743db5a7e9d1e569815cfa4
SSDEEP

3072:uGyV1e6et0zsgHS5fabqVUruvIk5UtlK8FC3:uG8t4fDVKv+UTm

Score

N/A

Malware Config

Signatures

Files

241c9c7e569d746b0f0fa4eea0a82203506641cc05839822dd4dfe8174835a6b
.exe windows x86

5da224a92d74982ea2e2e73e4810909b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefFrameProcA
ValidateRgn
ChildWindowFromPoint
VkKeyScanA
PeekMessageA
ShowOwnedPopups
DragDetect
RegisterClassW
CallNextHookEx
DrawIcon
GetMenuInfo

urlmon

URLOpenStreamW
CoInternetCreateSecurityManager
CoInternetCombineUrl
HlinkGoBack

wininet

HttpSendRequestW
InternetQueryOptionW
InternetLockRequestFile
FtpGetCurrentDirectoryA
GopherFindFirstFileA
FindCloseUrlCache
InternetCreateUrlA

gdi32

AddFontMemResourceEx
CreateBitmapIndirect
ChoosePixelFormat
CloseFigure
CopyEnhMetaFileA
ColorCorrectPalette
CreateDIBPatternBrush

kernel32

GetConsoleCP
ReadFile
IsProcessorFeaturePresent
HeapReAlloc
LCMapStringW
RtlUnwind
HeapSize
GetSystemTimeAsFileTime
GetConsoleMode
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleW
CreateFileW
GetCurrentProcessId
VirtualAlloc
GetSystemInfo
FreeLibrary
GetProcAddress
LoadLibraryA
GetProfileIntA
CreateIoCompletionPort
GlobalFindAtomW
QueueUserAPC
CreateDirectoryExW
GetEnvironmentStrings
VerifyVersionInfoW
GetModuleHandleW
ExitProcess
DecodePointer
InterlockedDecrement
InterlockedIncrement
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
HeapCreate

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5da224a92d74982ea2e2e73e4810909b

Headers

DLL Characteristics

File Characteristics

Imports

user32

urlmon

wininet

gdi32

kernel32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 18KB

.rsrc Size: 52KB - Virtual size: 55KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 18KB

.rsrc
Size: 52KB - Virtual size: 55KB