9c936bccbf8a886b125ddd56ed81f73c28e1fb8b8bd433ba031acef44e3b624a

Sharing

Copy URL

Twitter E-mail

General

Target

9c936bccbf8a886b125ddd56ed81f73c28e1fb8b8bd433ba031acef44e3b624a
Size

240KB
MD5

a2ae6b053f0403f81dabc008798dc730
SHA1

82961648d32354560cbe22e71eda7888f50a1435
SHA256

9c936bccbf8a886b125ddd56ed81f73c28e1fb8b8bd433ba031acef44e3b624a
SHA512

ce3b6d466f874d85183c3566d0a1a9b0f7472a4851c25570fe337d80db5015b9ae802a695df6945174ea342ad70dcafdb470d74c11706c8c5513ccfb49d590a3
SSDEEP

3072:WrRaGRywuvOEtwc5/b7p3FFmsyIfyvU/qgbGeHQ0EJjNt2KydtDzsIjr5WV2t2Fl:GeOEtVbFpwvAp16jytDzsq5Q1s+Hz

Score

N/A

Malware Config

Signatures

Files

9c936bccbf8a886b125ddd56ed81f73c28e1fb8b8bd433ba031acef44e3b624a
.exe windows x86

33959d57e46373a3160847edbe8e7d67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW
SendMessageA
RemoveMenu
GetClientRect
EnumDesktopWindows
MessageBoxIndirectW

oledlg

OleUIChangeIconW
OleUIChangeSourceW
ord1
ord11
OleUIBusyW

kernel32

TlsGetValue
HeapSize
GetProcessHeap
SetEndOfFile
CreateFileW
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
ReadFile
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetLastError
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapFree
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
MultiByteToWideChar
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
SetFilePointer
FlushFileBuffers
CreateFileA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33959d57e46373a3160847edbe8e7d67

Headers

DLL Characteristics

File Characteristics

Imports

user32

oledlg

kernel32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 13KB - Virtual size: 142KB

.rsrc Size: 128KB - Virtual size: 127KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 13KB - Virtual size: 142KB

.rsrc
Size: 128KB - Virtual size: 127KB

.reloc
Size: 4KB - Virtual size: 4KB