a95f3233a152b4a3647a019080bc4c62f751deeaea7cd63276e7aa5548347363

Sharing

Copy URL Twitter E-mail

General

Target

a95f3233a152b4a3647a019080bc4c62f751deeaea7cd63276e7aa5548347363
Size

219KB
MD5

123d5c5acb9e0e4b7e3cf6a91b145580
SHA1

de4c968a1dc08df4faed718450f677bc178a81b6
SHA256

a95f3233a152b4a3647a019080bc4c62f751deeaea7cd63276e7aa5548347363
SHA512

375c5d1480cdbfba4365bc24fecc256062c3c4f61356bfbb6b6a897cbbc177462de333c267c5be3e8fdf1525ef403b4199783a9b4fe52081d3f194f4b2a61a0d
SSDEEP

6144:gWVDb25L/kD1oe/Gk9DkfuweSNguW5xBbBMpy8c4eUk:7bwkDme/R9wouy8ct

Score

N/A

Malware Config

Signatures

Files

a95f3233a152b4a3647a019080bc4c62f751deeaea7cd63276e7aa5548347363
.exe windows x86

b6e420bcafcc48818c063abc8cd418d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FlushFileBuffers
CreateFileW
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapSize
RtlUnwind
LoadLibraryW
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
FindNextFileA
GetLocalTime
GlobalFree
GetLastError
FindFirstFileA
GlobalAlloc
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
GetProcessHeap
EnterCriticalSection
HeapAlloc
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
IsProcessorFeaturePresent
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile

user32

UpdateWindow
DialogBoxIndirectParamA
GetMonitorInfoA
CopyRect
DefWindowProcW
SetWindowTextW
GetDlgItemTextA
GetSystemMenu
GetWindowRect
GetWindowDC
IsIconic
KillTimer
GetSubMenu
GetParent
LoadCursorW
GetClientRect
BeginPaint
GetUpdateRect
GetForegroundWindow
GetMenu
OffsetRect
SetPropA
GetDlgItem
EndDialog
GetDesktopWindow
SetWindowPos
GetSysColorBrush
EnumDesktopsA
WindowFromDC
GetMenuItemCount
DestroyMenu

gdi32

DeleteObject
CreateCompatibleBitmap
MoveToEx
DeleteDC
Polyline
SelectObject
SetMapMode

ole32

CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance

gdiplus

GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6e420bcafcc48818c063abc8cd418d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

gdiplus

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 77KB - Virtual size: 84KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 77KB - Virtual size: 84KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 6KB - Virtual size: 5KB