aa256ce88da6d63d9033329e54a64a39f3e846a347c0137319b7c5eb699877f2

Sharing

Copy URL

Twitter E-mail

General

Target

aa256ce88da6d63d9033329e54a64a39f3e846a347c0137319b7c5eb699877f2
Size

389KB
MD5

400fb8ad495bdc7fc1c75d705f40f050
SHA1

03dc6874ad88c025aa4e7d267cd5804e3a5c97e7
SHA256

aa256ce88da6d63d9033329e54a64a39f3e846a347c0137319b7c5eb699877f2
SHA512

d64fd05f218b2d0cb765bfa8a0e63fefd0ce91c6485d468582ef22f54128a92c06f5e1e85adf3f6f5f22337012d8a26d270041a30b359ee7c5052edc790b1d5b
SSDEEP

6144:ZBHwn18nwD+OkWgHNsPODCtObDIffa+enBrhThmhZcJcaIqkFd15FULlH+y/jmAU:rkyOkdu2eQPIfS+enTYb9qSzFULJFm9

Score

N/A

Malware Config

Signatures

Files

aa256ce88da6d63d9033329e54a64a39f3e846a347c0137319b7c5eb699877f2
.exe windows x86

8477058678b65cb0951decc84ac0d74e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

ExitProcess
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
GetStdHandle
WriteConsoleW
SetStdHandle
ReadFile
GetStringTypeW
LCMapStringW
FlushFileBuffers
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
IsValidCodePage
HeapCreate
GetACP
GetCPInfo
HeapSize
Sleep
GetLastError
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
SetLastError
OpenProcess
HeapAlloc
CloseHandle
LocalFree
GetCurrentThreadId
GetTickCount
GlobalAlloc
lstrcmpiA
GetOEMCP
GetProfileIntA
lstrcpyW
GetCurrentDirectoryW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
CreateFileW
TlsAlloc
GetModuleFileNameW
WriteFile
LeaveCriticalSection
GetSystemTimeAsFileTime
EnterCriticalSection
EncodePointer
RaiseException
HeapFree
RtlUnwind
GetProcAddress
GetModuleHandleW
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

SendMessageA
SetTimer
KillTimer
DefWindowProcA
GetLastActivePopup
SetScrollInfo
ShowCaret
LoadBitmapA
GetSystemMetrics
ReleaseDC
GetClientRect
InvalidateRect
SetScrollPos
SetCursor
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
BeginPaint
EndPaint
DialogBoxParamA
GetSysColor
DrawTextA
GetWindowThreadProcessId
SetWindowPos
WindowFromPoint
GetDlgCtrlID
GetWindowContextHelpId
GetWindow
GetClassNameA
GetWindowTextA
EnumDisplayMonitors
GetDlgItem
CreateWindowExA
GetWindowLongA
SetWindowLongA
GetDC
SetWindowTextA

gdi32

CreateCompatibleBitmap
SelectObject
BitBlt
SetBkColor
GetStockObject
TextOutA
GetObjectA
CreateFontIndirectA
CreateCompatibleDC

advapi32

CryptEnumProviderTypesA

shell32

ExtractIconExA

odbc32

ord24

psapi

EnumProcessModules
GetModuleFileNameExA
GetModuleBaseNameA

shlwapi

StrSpnA

comctl32

CreateToolbarEx
ord6

tapi32

lineSetTollListA

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8477058678b65cb0951decc84ac0d74e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

odbc32

psapi

shlwapi

comctl32

tapi32

Sections

.text Size: 320KB - Virtual size: 319KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 320KB - Virtual size: 319KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 7KB - Virtual size: 6KB