1f6bc72b81b29a1a4c12b16a2a53a4ee8223e361ed6da375c6812775011e5551

Sharing

Copy URL Twitter E-mail

General

Target

1f6bc72b81b29a1a4c12b16a2a53a4ee8223e361ed6da375c6812775011e5551
Size

867KB
MD5

0b9660da2d3e2b4f4baa93e92caa9bb1
SHA1

213ad5a0aa4df5e60c6c1f954b0ecc9610a547b2
SHA256

1f6bc72b81b29a1a4c12b16a2a53a4ee8223e361ed6da375c6812775011e5551
SHA512

05596968299e3465d3b550bf151835cbe971d02705cc3e6a5488fd3e500cb0e2e49b4ee75eda2f946c71faa21424ff68ba56bfddae891a443e9f0d934b7c4480
SSDEEP

24576:mCov2WQJn2QP5CPykAu0hbVoYRRunXTgRcFF+HxoK2/800iuL:mAWQRjwykAtjsT8cFFOxoN0i

Score

N/A

Malware Config

Signatures

Files

1f6bc72b81b29a1a4c12b16a2a53a4ee8223e361ed6da375c6812775011e5551
.exe windows x86

d47482820f59239d71ea1cfe1f0402b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyW
RegEnumValueA
RegDeleteValueA
OpenSCManagerW
OpenServiceW
IsValidSid
RegEnumKeyW

kernel32

FreeResource
ReleaseSemaphore
GetComputerNameW
InitializeCriticalSectionAndSpinCount
GlobalFindAtomA
GetStringTypeA
RemoveDirectoryW
SetFileAttributesW
DeleteFileA
ExpandEnvironmentStringsW
LoadLibraryW
CreateFileW
GetModuleHandleW
SetCurrentDirectoryA
SetLastError
GetConsoleMode
InterlockedExchange
LoadResource
IsValidCodePage
VirtualQuery
GetCurrentDirectoryW
GetFileAttributesA
GetCurrentProcessId
GetSystemInfo
GetDateFormatA
lstrcpyW
WriteConsoleW
FileTimeToLocalFileTime
GetModuleHandleA
FlushFileBuffers
CompareFileTime
GetDiskFreeSpaceA
SetEnvironmentVariableA
HeapAlloc
SystemTimeToFileTime

gdi32

SetTextColor
PatBlt
CreateRectRgn
SetROP2
Escape
GetTextMetricsA
CreatePatternBrush
CreateDIBSection
GetTextExtentPoint32W
SetBkColor
CreateCompatibleBitmap
GetStockObject

user32

MapWindowPoints
OpenClipboard
MessageBeep
SetWindowsHookExW
GetClientRect
SetWindowLongW
GetKeyState
SetWindowPlacement
SetFocus
DeleteMenu
GetMenuItemID
SetCursor
SetRect
GetWindowDC
IsWindow
LoadImageW
SetWindowRgn
GetWindowLongW
DestroyIcon
LoadBitmapW
GetDC
EnableWindow
IsRectEmpty
UnhookWindowsHookEx

msvcrt

__p__commode
_callnewh
__getmainargs
__set_app_type
wcstoul
exit
fflush
?terminate@@YAXXZ
??0exception@@QAE@ABQBD@Z
_initterm
_XcptFilter
iswspace
isdigit
??1type_info@@UAE@XZ

ole32

CoInitialize

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d47482820f59239d71ea1cfe1f0402b4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ole32

Sections

.text Size: 432KB - Virtual size: 431KB

.rdata Size: 147KB - Virtual size: 147KB

.data Size: 191KB - Virtual size: 1.6MB

.rsrc Size: 95KB - Virtual size: 94KB

.reloc Size: 1024B - Virtual size: 860B

.text
Size: 432KB - Virtual size: 431KB

.rdata
Size: 147KB - Virtual size: 147KB

.data
Size: 191KB - Virtual size: 1.6MB

.rsrc
Size: 95KB - Virtual size: 94KB

.reloc
Size: 1024B - Virtual size: 860B