aea7dbdb649090016625f1050b6ece5734a306945e3e628038092d549baa85e5

Sharing

Copy URL Twitter E-mail

General

Target

aea7dbdb649090016625f1050b6ece5734a306945e3e628038092d549baa85e5
Size

162KB
MD5

089332f73eb2c2395539d55f7d23bde0
SHA1

73e08f75597345b765d1c53e5693bd1daa51d317
SHA256

aea7dbdb649090016625f1050b6ece5734a306945e3e628038092d549baa85e5
SHA512

e8df205f5156cc705fadd656021c2a41c26c17330f2edb6b8fc5f687b25915e3884d40eb4bf9bf3f774b444d74c4566f4c1c37627113ab9f10a30f5eb5cea9bd
SSDEEP

3072:98vcOHxvmp+Kl2l0D2B3rOWx1IcYfW1sPv:qUOHBa+KlJ6NrOWx1u+1sPv

Score

N/A

Malware Config

Signatures

Files

aea7dbdb649090016625f1050b6ece5734a306945e3e628038092d549baa85e5
.exe windows x86

a223b7f28a01ee598694711375a4b11f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtClose
RtlUnwind

mpr

WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW

kernel32

GetProcessTimes
GetCurrentThreadId
GetCurrentProcessId
GetThreadTimes
LoadLibraryA
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InterlockedCompareExchange
HeapDestroy
HeapCreate
HeapSize
MultiByteToWideChar
GetDriveTypeW
GetLogicalDriveStringsW
GetLongPathNameW
GetComputerNameExW
ExpandEnvironmentStringsW
GetLastError
FindClose
FindNextFileW
GetModuleHandleW
GetProcAddress
GetNativeSystemInfo
GetSystemTimeAsFileTime
GetVersionExW
CloseHandle
TerminateProcess
GetModuleFileNameW
GetProcessHeap
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
ExitProcess
LCMapStringW
WideCharToMultiByte
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
GetCurrentThread
GetTickCount
GetCurrentProcess
GetStringTypeW
LoadLibraryW
IsProcessorFeaturePresent
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileW
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
SetHandleCount

user32

CreateWindowExW
MessageBoxW
GetSystemMetrics
SendMessageW
UpdateWindow
EnableWindow
DefWindowProcW
ShowWindow
ExitWindowsEx
GetFocus
GetCapture
GetForegroundWindow
GetDesktopWindow
GetActiveWindow
GetClipboardOwner
GetShellWindow
GetOpenClipboardWindow
RegisterClassExW
TranslateMessage
GetClientRect
PostQuitMessage
GetMessageW
DispatchMessageW
GetKBCodePage

gdi32

CreateFontW
GetStockObject
SetTextColor

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges

shell32

SHGetFolderPathW

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a223b7f28a01ee598694711375a4b11f

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

mpr

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 11KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 11KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 7KB - Virtual size: 7KB