299eedf7ffa02ed445453b99c7d7621ccaa769ec20e96fcfd312384f83d6d84e

Sharing

Copy URL Twitter E-mail

General

Target

299eedf7ffa02ed445453b99c7d7621ccaa769ec20e96fcfd312384f83d6d84e
Size

109KB
MD5

18984e9f23ae4f32f9d1df62617edf90
SHA1

cb8764bcead8ebdcdfd9f13c028b2caa14a09d23
SHA256

299eedf7ffa02ed445453b99c7d7621ccaa769ec20e96fcfd312384f83d6d84e
SHA512

3ef221d9f7fc7716ae33651b62b654ebb62eee36bdd9a6b44635c08efe59bfca373081711711440d2103d4267ff1ffe1687089c9e25b7d43b2889fef75bc0d8c
SSDEEP

1536:BNP+oDNYq6kiu4CexvA6/KnxnKBGUquhfaKGYlSXY9KxxPpgyUIAYAwH9x:PP+geq6kVVOAuGDwaxHXYAHbAYAwd

Score

N/A

Malware Config

Signatures

Files

299eedf7ffa02ed445453b99c7d7621ccaa769ec20e96fcfd312384f83d6d84e
.exe windows x86

1eb4c329f385bdc70910e61536048e0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
LocalAlloc
CloseHandle
FileTimeToLocalFileTime
GetFileInformationByHandle
CreateFileW
HeapReAlloc
WriteConsoleW
SetStdHandle
HeapSize
RtlUnwind
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
MultiByteToWideChar
LCMapStringW
HeapFree
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
GetLastError
FileTimeToSystemTime
GetFileAttributesW
GetConsoleWindow
Sleep
GetProcessTimes
GetCurrentProcess
HeapAlloc
EnterCriticalSection
GetEnvironmentVariableW
GetStringTypeW
GetCommandLineW
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
FlushFileBuffers

user32

GetSystemMenu
HideCaret
ScreenToClient
GetWindowRect
PostQuitMessage
LoadStringA
CopyAcceleratorTableA
GetClientRect
CreateMenu
SendMessageA
BeginPaint
GetMenuItemID
GetWindowLongA
ReleaseDC
EnableMenuItem
GetMenuState
EndDialog
CheckDlgButton
EnumChildWindows
GetLastInputInfo
CreatePopupMenu
AppendMenuA
IsWindow
CreateWindowExW
IsWindowVisible
SendMessageW
ModifyMenuA
CheckMenuItem
MoveWindow
GetDC

gdi32

SetTextColor
StretchBlt
SelectObject
GetCharWidth32A
UpdateColors
BitBlt

advapi32

GetUserNameA

shell32

CommandLineToArgvW

comctl32

ImageList_Draw
ImageList_Create

opengl32

glNewList
glEndList
glBitmap

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1eb4c329f385bdc70910e61536048e0e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

opengl32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 5KB - Virtual size: 4KB