5012b352c5a11eba8f2b6cefbdb298dcae7c82486fe942a72bbe9a4f7460da43

Sharing

Copy URL Twitter E-mail

General

Target

5012b352c5a11eba8f2b6cefbdb298dcae7c82486fe942a72bbe9a4f7460da43
Size

237KB
MD5

4c522df3ceeea6fc74679c4fae946ea2
SHA1

480fd8993d7feaf147ee5f84e1c99ce0bade7d4d
SHA256

5012b352c5a11eba8f2b6cefbdb298dcae7c82486fe942a72bbe9a4f7460da43
SHA512

b89046b16a66c404fb5e29fc37d77ec852a589ba9e80661951754a7cdbec8eddc0d4933e51149f7f67e969d9a4c444bf91d9c68301ff33c2d0c105d35b55672d
SSDEEP

6144:W/hGUvk0IWYWnLnFcb1g+fYK+0E0VIi/YmiX:W/hbzIpWLFO19H+0E0VIkYm+

Score

N/A

Malware Config

Signatures

Files

5012b352c5a11eba8f2b6cefbdb298dcae7c82486fe942a72bbe9a4f7460da43
.exe windows x86

a8acb2da36a14a56dc3fe3bc00e22af6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

lstrcpyW
HeapAlloc
HeapCreate
GetProcessHeap
GetLastError
MultiByteToWideChar
LCMapStringW
GetCurrentDirectoryW
RtlUnwind
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapReAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetStringTypeW

user32

GetWindowLongA
GetClassNameW
GetLastActivePopup
SendMessageA
GetIconInfo
LoadBitmapA
SetWindowLongA
SendDlgItemMessageA
EnumWindows

oleaut32

SysStringLen

comctl32

ImageList_Add
ImageList_Create

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8acb2da36a14a56dc3fe3bc00e22af6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

comctl32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 106KB - Virtual size: 109KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 106KB - Virtual size: 109KB

.rsrc
Size: 76KB - Virtual size: 76KB