a304c54f5746d3fb6f03eec8df02a030946ebd45b3f1804d9cd2332a54f6f046

Sharing

Copy URL Twitter E-mail

General

Target

a304c54f5746d3fb6f03eec8df02a030946ebd45b3f1804d9cd2332a54f6f046
Size

77KB
MD5

0f12dacb6adcd937b07f45b8d63e6d40
SHA1

717d2c5fc1e03a425a4bbc1f442db93e5529f8de
SHA256

a304c54f5746d3fb6f03eec8df02a030946ebd45b3f1804d9cd2332a54f6f046
SHA512

4e7dd0108d832ec072c0fc7623d46835cc7f842c0788f8d03f855a9a9db03ea0a7e348cc32ab5ba0323ce87c7a737d1bdd649deab2e662e053b79cfd5a3d228c
SSDEEP

1536:wlt9NT03z4S57jPFWL1aHuUs5y/GLAC1VoXNjTWQB:ExT03z5TP9XWY

Score

N/A

Malware Config

Signatures

Files

a304c54f5746d3fb6f03eec8df02a030946ebd45b3f1804d9cd2332a54f6f046
.exe windows x86

75cc5772898c0e85f0db82786612d123

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntExA

kernel32

WaitForSingleObject
GetProcessHeap
ExpandEnvironmentStringsA
Sleep
lstrcatA
CreateFileMappingA
OutputDebugStringA
CreateThread
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
HeapAlloc
LoadLibraryW
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
MapViewOfFile
lstrlenA
ExitProcess
GetTickCount
lstrcmpiA
HeapSize
SetUnhandledExceptionFilter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter

user32

GetWindowRect
PostQuitMessage
BeginPaint
GetDC
EndDialog
DefWindowProcA
GetCursorPos
PostMessageA
EndPaint
DialogBoxParamA
MessageBoxA
GetMessageA
LoadBitmapA
LoadIconA
CreateWindowExA
DispatchMessageA
LoadCursorA
RegisterClassA
SetWindowTextA

gdi32

DeleteDC
SelectObject
CreateCompatibleDC
GetObjectA
DeleteObject
CreatePatternBrush
BitBlt

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75cc5772898c0e85f0db82786612d123

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 3KB - Virtual size: 20KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 3KB - Virtual size: 20KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 3KB - Virtual size: 2KB