1f0f99555071dd00d2b56c7f1158396d67f1bb2fd0f23aa861ae6d8e24b0bdbd

Sharing

Copy URL

Twitter E-mail

General

Target

1f0f99555071dd00d2b56c7f1158396d67f1bb2fd0f23aa861ae6d8e24b0bdbd
Size

193KB
MD5

0acf722f1cf5d6ac63d4f0111e1433b3
SHA1

6c60b4293f084a29f3442f9652affba188df929a
SHA256

1f0f99555071dd00d2b56c7f1158396d67f1bb2fd0f23aa861ae6d8e24b0bdbd
SHA512

6726b59e53b405003274a28b8f72976969098ef3bdfa9b319901fe72a5e7997f78572c2ce9313705ca2cfd3d32ff13ee2da24b81327033ba7422ef1a257dd074
SSDEEP

3072:BYtTT5nP7hW5VNrHmWMvWefNSkhnz9BU2EdbRFFHxpi4l+bj8Lq1FyeF+LRsriQ:BYLn6mz1Syadpi4fu3/kRUiQ

Score

N/A

Malware Config

Signatures

Files

1f0f99555071dd00d2b56c7f1158396d67f1bb2fd0f23aa861ae6d8e24b0bdbd
.exe windows x86

0c278cc28088818ae64c7a04175a5124

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
lstrlenW
DeleteFileA
lstrlenA
GetWindowsDirectoryA
GetCommandLineA
GetOEMCP
SetCurrentDirectoryA
GetStartupInfoA
DeleteFileW
GetModuleHandleA
VirtualAlloc
VirtualFree
GetACP
CopyFileA
GetVersion
GetDriveTypeA
GetUserDefaultLangID
GetCurrentProcess
IsDebuggerPresent
GetConsoleOutputCP
lstrcmpiW
GetTickCount
GetThreadLocale
GetCommandLineW
MulDiv
QueryPerformanceCounter
GetProcessHeap
GlobalFindAtomW
RemoveDirectoryA
lstrcmpiA
lstrcmpA
GetCurrentThread
GetCurrentProcessId
GetCurrentThreadId

user32

GetSystemMetrics
GetDesktopWindow
TranslateMessage
GetParent
CharNextA
GetDC

gdi32

GetObjectA
SetTextColor
DeleteObject
DeleteDC
GetTextMetricsA
LineTo
SetStretchBltMode
SelectObject
CreateCompatibleDC
SetMapMode
CreatePalette
CreatePen
GetClipBox
SelectPalette
GetStockObject
CreateFontIndirectA
PatBlt
CreateSolidBrush
RestoreDC
SetTextAlign
GetPixel
SaveDC
RectVisible
GetDeviceCaps

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bwirg Mv
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sgkdfgct
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fixgtob
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0c278cc28088818ae64c7a04175a5124

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

glu32

Sections

.text Size: 11KB - Virtual size: 11KB

Bwirg Mv Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 25KB

Sgkdfgct Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 54KB - Virtual size: 56KB

fixgtob Size: - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 11KB

Bwirg Mv
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 25KB

Sgkdfgct
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 54KB - Virtual size: 56KB

fixgtob
Size: - Virtual size: 4KB