baca48a5aede7c02cb933063a1fe0bc05e76200a5bb69ecf9c42433b1847637c

Sharing

Copy URL

Twitter E-mail

General

Target

baca48a5aede7c02cb933063a1fe0bc05e76200a5bb69ecf9c42433b1847637c
Size

143KB
MD5

a2d99a7c17a0d7a68c5a1c4cbd159a02
SHA1

6c2a8b9b3067259a59cfd6f9c4076d30952569b6
SHA256

baca48a5aede7c02cb933063a1fe0bc05e76200a5bb69ecf9c42433b1847637c
SHA512

367b6c4eba821f4bc5d77c5a84c0159a69e181d9a874d611b918e95c4a9260452c591a6bacf4f7795e0790d12a845a54dd6704fdb7664b488fea777e30168e39
SSDEEP

3072:EZMoXiKCLiZmR2cxmA9f2kh/5T4Afbv0Vvq3:EoKZSocBnzn

Score

N/A

Malware Config

Signatures

Files

baca48a5aede7c02cb933063a1fe0bc05e76200a5bb69ecf9c42433b1847637c
.exe windows x86

eadff99c5559181e23b1303c932501cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
GetCurrentProcess
DeleteCriticalSection
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
GetStartupInfoA
GetCurrentThreadId
InterlockedIncrement
GetModuleHandleA
GetCurrentThread
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
CompareFileTime
InterlockedDecrement
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
GetLocaleInfoA
CompareStringW

user32

GetSystemMetrics

gdi32

DPtoLP
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
GetObjectW
GetDIBColorTable
DeleteObject
GetPaletteEntries
GetBitmapBits
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn

ole32

CoTaskMemFree
OleInitialize
OleDuplicateData
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc

msi

ord46

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eadff99c5559181e23b1303c932501cb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msi

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 38KB - Virtual size: 90KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 38KB - Virtual size: 90KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB