b28421871f28a02ef472a519f82a6ec0c277cd1f54a3801ebffbfd26a6f94752

Sharing

Copy URL Twitter E-mail

General

Target

b28421871f28a02ef472a519f82a6ec0c277cd1f54a3801ebffbfd26a6f94752
Size

708KB
MD5

20806e6bbba451b10d5b3bb228e05220
SHA1

027a3662ae308f48837a4efa079ff5fa2efe0961
SHA256

b28421871f28a02ef472a519f82a6ec0c277cd1f54a3801ebffbfd26a6f94752
SHA512

b4c59553dcb1c3c776525d89877530c76b57a99f5c135ea061ca80e5a7e17097b6e67f3a055892dece727138ec9a1ab23100488f56b455cdcab155596218441b
SSDEEP

12288:6I0Ua17Mn7WU44P+b/jAe09dVYKpmEgGJdQJf3f8HuqXIJ2HXMq1UxcedtJIG:6IH7rV6cekz7pwGPErbuXUyedT

Score

N/A

Malware Config

Signatures

Files

b28421871f28a02ef472a519f82a6ec0c277cd1f54a3801ebffbfd26a6f94752
.exe windows x86

f32dff1cca7633277a3119e714afee19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GlobalUnlock
SetCurrentDirectoryW
CancelWaitableTimer
SetFileApisToOEM
GetThreadContext
ConnectNamedPipe
WaitNamedPipeW
IsDBCSLeadByte
CreateDirectoryA
WaitForMultipleObjects
GetOverlappedResult
CreateNamedPipeA
GetPrivateProfileSectionNamesW
InitAtomTable
GetDateFormatW
DnsHostnameToComputerNameW
LocalSize
OutputDebugStringA
SetMessageWaitingIndicator
FreeEnvironmentStringsW
GetThreadSelectorEntry
GetNumberFormatW
GetThreadLocale
FindNextChangeNotification
RequestDeviceWakeup
WriteProfileSectionA
lstrcmpA
InterlockedCompareExchange
DebugActiveProcess
LoadModule
DeleteTimerQueue
GetCommModemStatus
GetDevicePowerState
FindNextVolumeW
GetPrivateProfileStringW
GetDiskFreeSpaceExA
GetThreadPriorityBoost
DuplicateHandle
PeekNamedPipe
CreateWaitableTimerW
GetProfileStringA
UnmapViewOfFile
CreateJobObjectA
OpenFileMappingA
GetSystemTime

user32

WinHelpA
SetClassLongW
CreateIcon
CharToOemW
DdeAccessData
LoadIconW
IsClipboardFormatAvailable
GetPropW
DestroyMenu
SendDlgItemMessageA
DdeConnectList
MonitorFromPoint
UnpackDDElParam
GetListBoxInfo
DialogBoxIndirectParamA
SetWindowContextHelpId
PtInRect
GetWindowInfo
DdeSetQualityOfService
IMPQueryIMEA
SetLayeredWindowAttributes
SetKeyboardState
GetWindowTextA
CharLowerBuffW
GetDialogBaseUnits
EnumThreadWindows
SetWindowsHookExA
DefWindowProcW
PostMessageA
ScrollWindow
DdeUnaccessData
DdeAddData
ShowCursor
DdeGetData
OemToCharA
RegisterWindowMessageA
GetMenuItemID
MessageBoxExW
DdeDisconnect
MessageBoxA
LoadCursorA
UnregisterHotKey
GetMessageW
CallWindowProcA
IntersectRect
CascadeWindows
ArrangeIconicWindows
DdeQueryStringA
SetRect
GetMenu
IsWindowEnabled
GetDesktopWindow
SetCaretPos
DrawFrameControl
SetShellWindow
GetMessageTime
SubtractRect
SetDebugErrorLevel
InsertMenuW
IsWindow
DeferWindowPos
VkKeyScanExW
FreeDDElParam
DdeQueryStringW
RegisterShellHookWindow
TrackMouseEvent
CreateMenu
CopyImage
CreateIconIndirect
EmptyClipboard
MonitorFromWindow
RealChildWindowFromPoint
CreateAcceleratorTableA
DdePostAdvise
GetClassNameA
GetKBCodePage
EnumDesktopsW
LoadCursorFromFileA
UnloadKeyboardLayout
ReuseDDElParam

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f32dff1cca7633277a3119e714afee19

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 245KB - Virtual size: 244KB

.data Size: 232KB - Virtual size: 636KB

.idata Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 221KB - Virtual size: 221KB

.text
Size: 245KB - Virtual size: 244KB

.data
Size: 232KB - Virtual size: 636KB

.idata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 221KB - Virtual size: 221KB