0646d09847a79004dd7ade1e68f887fc56e01eee78b906f577d4f575cc5adad9

Sharing

Copy URL

Twitter E-mail

General

Target

0646d09847a79004dd7ade1e68f887fc56e01eee78b906f577d4f575cc5adad9
Size

58KB
MD5

15b44d18626bb42b857f0f453a0e093a
SHA1

e9956cf2b133e18671242c8452bdc4fe2ab62181
SHA256

0646d09847a79004dd7ade1e68f887fc56e01eee78b906f577d4f575cc5adad9
SHA512

ed91db1fbda40ad39edd49f28757d5bf4b9ef3d386c309ee3025e31fd92e9f9065209ad68ff7b6387681c61bdb9d17af1937daf711a98d72265df96a28a136f5
SSDEEP

1536:PbYQH1Fo+kscD1rPm2ckE4JnE+Hpbjmqzg2:PM8m+aDhm4JE+Ht3

Score

N/A

Malware Config

Signatures

Files

0646d09847a79004dd7ade1e68f887fc56e01eee78b906f577d4f575cc5adad9
.exe windows x86

650466526d0ca0fc5dcda164f16fc0d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringW
LoadAcceleratorsW
LoadIconW
RegisterClassExW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
PostQuitMessage
SetFocus
CreateWindowExW
ShowWindow
UpdateWindow

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
ReadFile
GetTickCount
LoadLibraryW
CreateFileA
TlsGetValue
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
RaiseException
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP

gdi32

DeleteObject
CreateSolidBrush
SetTextAlign
GetStockObject

comctl32

InitCommonControlsEx

shell32

DragFinish
ExtractIconA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

650466526d0ca0fc5dcda164f16fc0d5

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

comctl32

shell32

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 11KB - Virtual size: 10KB