cf1e21430f89cc460d08b5ec7bb811b8f7f05f7cfc0276637f55c7b71748e771

Sharing

Copy URL Twitter E-mail

General

Target

cf1e21430f89cc460d08b5ec7bb811b8f7f05f7cfc0276637f55c7b71748e771
Size

137KB
MD5

227d23343b7f64c62f09385a8e428020
SHA1

ec3bd06afd79b64fa63a642e89d718408667cfb7
SHA256

cf1e21430f89cc460d08b5ec7bb811b8f7f05f7cfc0276637f55c7b71748e771
SHA512

028dca4472ca68d3bf0dd01dfdff0fe52edf8ee31030068379a507d6cef7deb283a4a276a6345efa84112920dfda416fe7b79b5101bf9fd75d0be220619f8178
SSDEEP

3072:3EsUqjkvgA+rROXqDvZ4e/hCL3CQ9vnkuOfpYoizXKv6tF/JQEgUlW:DpjqgAvsR4e5CL3C+vdOfppIXKSNrpU

Score

N/A

Malware Config

Signatures

Files

cf1e21430f89cc460d08b5ec7bb811b8f7f05f7cfc0276637f55c7b71748e771
.exe windows x86

b95d1ba53aab79060e394977dc35f477

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowLongW
LoadIconW
DrawFocusRect
GetQueueStatus
EndPaint
SendMessageTimeoutA
DrawStateA
EnumPropsExW
RegisterWindowMessageA
SetWindowsHookA
ChangeClipboardChain

shell32

DragQueryPoint
DragAcceptFiles
ShellExecuteExA
Shell_NotifyIconW
ShellExecuteA
DoEnvironmentSubstW
FindExecutableA

wininet

FtpSetCurrentDirectoryW
InternetCreateUrlW
InternetReadFileExW
RetrieveUrlCacheEntryFileA
HttpQueryInfoA
InternetCreateUrlA

gdi32

CreateDIBSection
CancelDC
CloseFigure
CombineTransform
CombineRgn

kernel32

CreateFileW
WriteConsoleW
CloseHandle
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ReadFile
ReadConsoleInputA
SetConsoleMode
SetFilePointer
UnhandledExceptionFilter
GlobalSize
LoadModule
CreateJobObjectW
WriteFileEx
GetComputerNameExA
EndUpdateResourceA
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
Sleep
HeapFree
MultiByteToWideChar

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edwhvly
Size: - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b95d1ba53aab79060e394977dc35f477

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

wininet

gdi32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 86KB - Virtual size: 114KB

edwhvly Size: - Virtual size: 80KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 86KB - Virtual size: 114KB

edwhvly
Size: - Virtual size: 80KB