3f9554a9e9cf5ff98ea23bbd991a55da36b81aeb1f13efd1910bc5f3c42772c5

Sharing

Copy URL Twitter E-mail

General

Target

3f9554a9e9cf5ff98ea23bbd991a55da36b81aeb1f13efd1910bc5f3c42772c5
Size

327KB
MD5

0c219835d40b11f681ebd43dae161e20
SHA1

a97b0a8c926a146b8234c08fc5870f3016b20264
SHA256

3f9554a9e9cf5ff98ea23bbd991a55da36b81aeb1f13efd1910bc5f3c42772c5
SHA512

b809e5ab02e9b79438f721dd498c1386a466bf0f428a68aaa4ab226c6b11531acec46ee8233e332644ee5a0419902f5001fd2dd1338c60ef64cc62e98fc670f0
SSDEEP

6144:g/QG6ALOHSgUajGilNR5EDyRUoHoK+Pu2O7NzywAP+BPu91BE/ZDVsWld16:gQzALOHSSX1yyRUJK+G2AfGl1SbsW/g

Score

N/A

Malware Config

Signatures

Files

3f9554a9e9cf5ff98ea23bbd991a55da36b81aeb1f13efd1910bc5f3c42772c5
.exe windows x86

e0323cceb34df3459d4a51ef150dafae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

AllocConsole
GetLastError
SetConsoleTitleW
CreateFileW
CloseHandle
SetFilePointer
WriteConsoleW
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
RtlUnwind
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetProcessHeap
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
HeapFree
SetHandleCount
Sleep
GetModuleFileNameW
WriteFile
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetProfileIntA
WriteProfileStringA
LocalAlloc
FormatMessageA
ExitProcess
HeapCreate
GetCommandLineW
GetProcAddress
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryW
EncodePointer
DeleteCriticalSection
GetModuleHandleA
GetEnvironmentStringsW
LoadLibraryA
IsProcessorFeaturePresent
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetFileType
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
DecodePointer
EnterCriticalSection
LeaveCriticalSection
SetStdHandle

user32

SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
GetClientRect
FindWindowA
FindWindowExA
SetWindowRgn
PeekMessageA
WindowFromPoint
GetClassNameA
MessageBeep
wsprintfA
PostMessageA
CallNextHookEx
GetClassNameW
GetWindowPlacement
SetWindowPlacement
InvalidateRect
DrawMenuBar
DefMDIChildProcA
GetDialogBaseUnits
SetRectEmpty
MapDialogRect
OffsetRect
CopyRect
SetWindowPos
GetDlgItem
GetWindowRect
GetSystemMetrics
MessageBoxA
DefWindowProcA
GetDC
SetWindowTextA
OpenClipboard
EmptyClipboard
CopyImage
SetClipboardData
CloseClipboard
GetMenu
SetMenuItemInfoA
GetParent
LoadBitmapA
BeginPaint
EndPaint

gdi32

CreateCompatibleDC
SelectObject
GetPixel
CreateRectRgn
CombineRgn
CreateCompatibleBitmap
StretchDIBits
CreatePatternBrush
DeleteObject
CreateEllipticRgnIndirect

shell32

CommandLineToArgvW
DragAcceptFiles
DragQueryFileA
DragFinish
SHParseDisplayName

netapi32

NetShareGetInfo
NetApiBufferFree
NetWkstaUserGetInfo

comctl32

ImageList_Create
ord17

gdiplus

GdipGetImageEncodersSize

winhttp

WinHttpOpen

uxtheme

OpenThemeData

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0323cceb34df3459d4a51ef150dafae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

netapi32

comctl32

gdiplus

winhttp

uxtheme

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 11KB

.bdata Size: 199KB - Virtual size: 199KB

.udata Size: 18KB - Virtual size: 17KB

.ddata Size: 4KB - Virtual size: 4KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 11KB

.bdata
Size: 199KB - Virtual size: 199KB

.udata
Size: 18KB - Virtual size: 17KB

.ddata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 5KB - Virtual size: 4KB