810045d87de305495607f822d44f9c7aefda8a98b6ff1287c473164f84a86183

Sharing

Copy URL Twitter E-mail

General

Target

810045d87de305495607f822d44f9c7aefda8a98b6ff1287c473164f84a86183
Size

230KB
MD5

360d6241724e2bec6fc07669f6cac5ce
SHA1

c9eb0f18fb5c9fca1227b055f6e3797b73b6df6b
SHA256

810045d87de305495607f822d44f9c7aefda8a98b6ff1287c473164f84a86183
SHA512

62d18f0c584e0401427f24921426a024fdb46ab99d0b53c886e5dafc16fb1dd5f8c318f54df0c5edd6042ef6cd8bc0e837b8983dc4e1a63499d16d62e415a8a2
SSDEEP

6144:CvwhODn56FxOK+rUb+UrKTtKJKd+KmbkTqS:CvwhKMvl+EteBKod+KmbkTqS

Score

N/A

Malware Config

Signatures

Files

810045d87de305495607f822d44f9c7aefda8a98b6ff1287c473164f84a86183
.exe windows x86

00132bb91b3264692ab41afc276bd75f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW
FindExecutableA
DragQueryFileA
DragAcceptFiles
ShellExecuteA
ExtractIconExW
ShellExecuteExW

ole32

CoRevokeClassObject
CoSuspendClassObjects
CoGetInstanceFromFile
CoCreateInstanceEx
StgOpenStorage
GetRunningObjectTable
CoInitializeEx

advapi32

CloseEventLog
GetLengthSid
RegQueryValueW
DestroyPrivateObjectSecurity
QueryServiceStatus
GetServiceDisplayNameA
RegQueryMultipleValuesW

kernel32

GetConsoleCP
LoadLibraryW
HeapReAlloc
FlushFileBuffers
IsProcessorFeaturePresent
SetStdHandle
HeapSize
SetFilePointer
TlsSetValue
HeapSetInformation
GetProcessTimes
SetTimerQueueTimer
GetProcessHeaps
GetNumberOfConsoleInputEvents
GetPrivateProfileIntA
IsBadHugeWritePtr
GetLastError
GetFullPathNameA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapCreate
GetCommandLineA
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetDriveTypeW
HeapFree
WriteConsoleW
MultiByteToWideChar
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
CreateFileW
CloseHandle
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
GetCurrentDirectoryW
GetStringTypeW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00132bb91b3264692ab41afc276bd75f

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 21KB

.rsrc Size: 163KB - Virtual size: 162KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 21KB

.rsrc
Size: 163KB - Virtual size: 162KB