c9d61ee0d5589bbe68eeebc7547f651907cbb3b5463f8e5caebe287d1761ecca

Sharing

Copy URL

Twitter E-mail

General

Target

c9d61ee0d5589bbe68eeebc7547f651907cbb3b5463f8e5caebe287d1761ecca
Size

209KB
MD5

8d48c8f2d4f685d5ae84e30ec064a4b7
SHA1

a1edc3aeb286ab1ef673d6d3b82b36bad21fee8a
SHA256

c9d61ee0d5589bbe68eeebc7547f651907cbb3b5463f8e5caebe287d1761ecca
SHA512

ccc0f2d0b068ed2a92ac9d71de65fbcb4fb85e51deace595c6dc25da0ea657be665ce37994165d71a4bab3f0d046ff9bebb2d470fd3449c01d755be87d900877
SSDEEP

3072:lFfhTVrVfpy+MQ34kfDDffffNfffLffffqyffAfffjffffNfffLffffCQffcfffp:lFfw41fOh7dNgbMuNrPvHl

Score

N/A

Malware Config

Signatures

Files

c9d61ee0d5589bbe68eeebc7547f651907cbb3b5463f8e5caebe287d1761ecca
.exe windows x86

1bd13e990bee73f18887d08a5fed6404

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollBarInfo
MessageBoxA
LoadKeyboardLayoutA
OpenClipboard
GetWindowLongW
MoveWindow
DeleteMenu
MessageBoxW
CreateMenu
SetRect
wsprintfW
TrackPopupMenu
GetCursorPos
GetMenuItemID
GetKeyState
KillTimer
GetMenuDefaultItem
EmptyClipboard
GetCapture
DefDlgProcW
FrameRect
WindowFromDC
CopyIcon
GetQueueStatus
RegisterShellHookWindow
IsWindowVisible
GetProcessWindowStation
GetWindowRgnBox
IsGUIThread

shell32

SHGetMalloc
ShellExecuteW

ole32

CreateILockBytesOnHGlobal

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA

gdi32

CreateSolidBrush
CreateFontIndirectW
TextOutA
FillRgn
CreateRectRgn
SetDCBrushColor
SetPaletteEntries
SetICMProfileA
GetTextFaceA
GetViewportExtEx
GetBoundsRect
SetPixelV
DeleteMetaFile
GetRasterizerCaps
GetTextColor
GetCharWidth32W
TranslateCharsetInfo
SetGraphicsMode
GetCharABCWidthsW
AbortPath
TextOutW
GetBitmapDimensionEx
CreateBrushIndirect

crypt32

CryptMsgGetParam

kernel32

TlsFree
TlsSetValue
GetFileType
InterlockedIncrement
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
TlsAlloc
FileTimeToLocalFileTime
SetProcessPriorityBoost
TlsGetValue
InitAtomTable
GetThreadPriority
SetStdHandle
GetProcessWorkingSetSize
GlobalReAlloc
GetVersionExA
EndUpdateResourceW
WideCharToMultiByte
TerminateThread
GetTickCount
GetSystemTimeAsFileTime
GetPrivateProfileStringW
LoadLibraryA
VirtualFree
FindNextFileW
LocalFree
GetLocaleInfoA
GetCurrentProcessId
VirtualProtect
GetCurrentThread
LoadResource
GetProcAddress
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bd13e990bee73f18887d08a5fed6404

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

crypt32

kernel32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 13KB - Virtual size: 52KB

.rsrc Size: 126KB - Virtual size: 126KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 13KB - Virtual size: 52KB

.rsrc
Size: 126KB - Virtual size: 126KB