6085e3e58cc505fbd392dad95b0fc0120bfc4f99d5fcb12e1d873d84e4e7f5d2

Sharing

Copy URL Twitter E-mail

General

Target

6085e3e58cc505fbd392dad95b0fc0120bfc4f99d5fcb12e1d873d84e4e7f5d2
Size

196KB
MD5

a2c458ba8e81310e1b46b47dc16e2520
SHA1

400dbfb7e103d7d79cdad6567604d33c046c97c7
SHA256

6085e3e58cc505fbd392dad95b0fc0120bfc4f99d5fcb12e1d873d84e4e7f5d2
SHA512

7bad66425bd1fdf7b40efa4113250607e9c3e097174601d2f144f5ad243de81b3fd76a86ed312b7388162e09b9ba05cf52e4fdef00c24508d51807a68b5b7f95
SSDEEP

3072:OR+sdTSSoUE3nc27KfOM0bkMTtKj8s8DDU24kTxY:3gTSSP1CE8F92

Score

N/A

Malware Config

Signatures

Files

6085e3e58cc505fbd392dad95b0fc0120bfc4f99d5fcb12e1d873d84e4e7f5d2
.exe windows x86

d635154832bf6543235829213e474669

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleHandleA
InterlockedDecrement
GetStartupInfoA
GetStartupInfoW
GetCurrentThreadId
GetCurrentThread
InterlockedIncrement
CompareFileTime
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
VirtualAlloc
lstrlenA
SetStdHandle
WaitForSingleObject
LCMapStringW
ExitProcess
WideCharToMultiByte
GlobalFree
CreateEventW
GetFileAttributesA
lstrlenW
GetStringTypeW
LocalAlloc
EnterCriticalSection
LocalFree
LoadLibraryA
LoadLibraryExW
FreeLibraryAndExitThread
GetVersionExW
FindClose
HeapAlloc
CloseHandle
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
HeapReAlloc
OutputDebugStringW
RtlUnwind
FreeLibrary
SetConsoleCtrlHandler
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
FatalAppExitA
LeaveCriticalSection
CreateSemaphoreW
CreateFileW
GetTickCount
TlsFree
GetCommandLineW
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetLastError
SetLastError
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue

user32

GetSystemMetrics
IsWindowEnabled
ChildWindowFromPoint
wsprintfA
SetClipboardData
SetMenuItemBitmaps
LoadIconA
EnableWindow
CloseClipboard
DrawTextW
ClientToScreen
GetClientRect
EndPaint
SetWindowPos
FillRect
GetSubMenu
GetWindowRect
PostQuitMessage
PostMessageA
GetWindowInfo
DispatchMessageW
GetMenuItemID
InvalidateRect
SetFocus
GetParent

msi

ord50

shell32

SHFileOperationW

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d635154832bf6543235829213e474669

Headers

File Characteristics

Imports

kernel32

user32

msi

shell32

Sections

.text Size: 112KB - Virtual size: 110KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 52KB - Virtual size: 103KB

.rsrc Size: 4KB - Virtual size: 448B

.text
Size: 112KB - Virtual size: 110KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 52KB - Virtual size: 103KB

.rsrc
Size: 4KB - Virtual size: 448B