932376a9f00b9c24a1c43dcacdd468e068502ad3d47cc1e291b4bee97017bae6

Sharing

Copy URL Twitter E-mail

General

Target

932376a9f00b9c24a1c43dcacdd468e068502ad3d47cc1e291b4bee97017bae6
Size

220KB
MD5

0ca4503e2717744b579c0bd4c64301e0
SHA1

325a6dae49a9ea9793b0a034712bfe900d5b2ce9
SHA256

932376a9f00b9c24a1c43dcacdd468e068502ad3d47cc1e291b4bee97017bae6
SHA512

52800f5ee4d943b685f911be86b4877de171a6fbaf12b835f7e4674d4d184aa3900f63f6760d74a1829c381a77fb4a2199bf65e6aea729d0e6c844ed5443206e
SSDEEP

3072:nLVwiSUhq5zu+N18zXN/q8nWDt28TY0sfsSLRGT6yFQeju74JSX:P7hq5z38zvWDtBTYhfsY86QjeP

Score

N/A

Malware Config

Signatures

Files

932376a9f00b9c24a1c43dcacdd468e068502ad3d47cc1e291b4bee97017bae6
.exe windows x86

feb488ed8ad5a92eceedace3b8832344

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAltTabInfoA
DrawEdge
GetAltTabInfoW
CreateIconIndirect
GetMessageTime
GetUserObjectInformationA
SetCaretPos
GetDlgItemTextA
DrawTextExA
GetClipCursor
DdeConnect

wininet

GopherGetAttributeA
InternetGoOnline
FtpSetCurrentDirectoryW
CreateUrlCacheGroup
UnlockUrlCacheEntryStream
InternetFindNextFileW

opengl32

glColor4ui
glLoadMatrixd
glLineWidth
glRasterPos4iv
glColor3b
glTexCoord2dv
glMultMatrixf

kernel32

SetUnhandledExceptionFilter
CreateFileW
CloseHandle
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
LoadLibraryW
WriteConsoleOutputA
QueueUserWorkItem
GetTempFileNameA
GetAtomNameA
ChangeTimerQueueTimer
TerminateProcess
WriteFile
GetLastError
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mrbokaw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

feb488ed8ad5a92eceedace3b8832344

Headers

DLL Characteristics

File Characteristics

Imports

user32

wininet

opengl32

kernel32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 154KB - Virtual size: 155KB

mrbokaw Size: - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 154KB - Virtual size: 155KB

mrbokaw
Size: - Virtual size: 4KB