9dc81ef2ae355e630ac2fea34430ebc824cdb16e95d08d5ce895e728ac521176

Sharing

Copy URL Twitter E-mail

General

Target

9dc81ef2ae355e630ac2fea34430ebc824cdb16e95d08d5ce895e728ac521176
Size

950KB
MD5

e2c2abdef531704c5a34c313cb17f516
SHA1

0ec222dc7828bcaaea0795047f627d3e28d4a5fe
SHA256

9dc81ef2ae355e630ac2fea34430ebc824cdb16e95d08d5ce895e728ac521176
SHA512

614fe9462f73ccd5941dab6188ec596a589becef0287eafd08831a1c4673dbbd082ceb3d66e5285551b0ef2916af6a8f0fbe7c4a8c518cb668b8d9d0496376d2
SSDEEP

12288:iUNG1iuUeRIkMwjeSFRKeNzHOzXuAoXUHCWKkY:iUNG1x0Lwi0zuz+AoPWK

Score

N/A

Malware Config

Signatures

Files

9dc81ef2ae355e630ac2fea34430ebc824cdb16e95d08d5ce895e728ac521176
.exe windows x86

63251140a63aafbb1ff12696738bf8d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LocalFree
MultiByteToWideChar
RtlUnwind
GetSystemDirectoryW
SetFilePointer
SetHandleCount
SetStdHandle
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
GetStdHandle
GetStartupInfoW
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcess
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushInstructionCache
FlushFileBuffers
ExitProcess
DeleteCriticalSection
CreateThread
CreateProcessW
CreateEventW
CloseHandle
GetStartupInfoA
lstrlenA
GetCommandLineA
GetLastError
GetModuleHandleA
GetFileAttributesW
GetTickCount
GetVersion
HeapAlloc
VirtualAllocEx
GetProcessHeap
GetCurrentThreadId
GetCommandLineW
GlobalAlloc
LoadLibraryW
lstrlenW
GetDriveTypeA
GetCurrentProcessId
Sleep
GetFileAttributesA
GetDriveTypeW
LoadLibraryA
SetEvent
GetModuleHandleW

user32

TranslateMessage
UnregisterClassW
SetWindowLongW
SetThreadDesktop
SetProcessWindowStation
SetForegroundWindow
SetDlgItemTextW
RegisterClassW
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenWindowStationW
OpenDesktopW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetWindowTextW
GetUserObjectInformationW
GetThreadDesktop
GetProcessWindowStation
GetMessageW
GetDesktopWindow
EnumThreadWindows
DispatchMessageW
DefWindowProcW
CreateWindowExW
CharNextW
LoadIconW
GetSystemMetrics
ShowWindow
LoadBitmapW
GetParent
LoadBitmapA
IsDlgButtonChecked
LoadIconA
DestroyWindow
UpdateWindow
GetDlgItem
SendMessageA
IsWindowVisible
DestroyIcon
GetKeyState
GetMenu
EnableMenuItem
IsWindow
GetDC
SendMessageW
GetSysColor

gdi32

CreateMetaFileW
GetEnhMetaFileW
DeleteEnhMetaFile
CreateCompatibleDC
AddFontResourceW
CreatePatternBrush
GetGraphicsMode
DeleteObject
DeleteMetaFile
GdiFlush
CreateHalftonePalette
CloseFigure
EndDoc
FlattenPath
GdiGetBatchLimit
GetColorSpace
AbortPath
GetEnhMetaFileA
GetBkColor
SelectObject
EndPage
AbortDoc
GetFontLanguageInfo
DeleteDC
CancelDC
AddFontResourceA
GetDCPenColor
SaveDC
EndPath
CloseMetaFile
CreateMetaFileA
SetBkMode
GetDCBrushColor
DeleteColorSpace
BeginPath
CreateSolidBrush
CloseEnhMetaFile
SetTextColor
GetBkMode
SetTextAlign
GetLayout

advapi32

RegQueryValueExA
RegOpenKeyA

shell32

Shell_NotifyIconW

ole32

CoSuspendClassObjects
CoUninitialize
CoResumeClassObjects
CoInitializeSecurity
CoInitializeEx

winmm

timeGetTime

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63251140a63aafbb1ff12696738bf8d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

Sections

.text Size: 894KB - Virtual size: 893KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 23KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 894KB - Virtual size: 893KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB