f236dae55d02ac432bf381528b7429e02f5896c3c8eb7c4de4d1b669e9ba191d

Sharing

Copy URL Twitter E-mail

General

Target

f236dae55d02ac432bf381528b7429e02f5896c3c8eb7c4de4d1b669e9ba191d
Size

216KB
MD5

0e7d730871187179c1e90880f0b48b80
SHA1

6d703a43b6e239ab8867605bbda3f34c779c9d6b
SHA256

f236dae55d02ac432bf381528b7429e02f5896c3c8eb7c4de4d1b669e9ba191d
SHA512

9f29357027898c2ab9ffbdd0f0471144b6629ae99b9f3f875d30e3d2b6f765aeda27b127f29fab9dbf9f8ba6c4151ecb749885445ddab6bda160a528661f5241
SSDEEP

6144:yuhBKdSdfQTYZM7dQqP+CMxgRbVslglYVW:yCWefy4qP+CMxMVslxVW

Score

N/A

Malware Config

Signatures

Files

f236dae55d02ac432bf381528b7429e02f5896c3c8eb7c4de4d1b669e9ba191d
.exe windows x86

d409a588411c54878a33e7599e8ce93e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsRectEmpty
EnumDisplayDevicesA
SendDlgItemMessageW
IsChild
DefDlgProcA
OemToCharA
CreateMDIWindowW
InsertMenuA
GetMenuStringA
GetTabbedTextExtentW
FindWindowExA
OpenWindowStationW
IntersectRect
CharNextExA
PtInRect

ole32

OleDuplicateData
OleDestroyMenuDescriptor
CoTreatAsClass
OleRun
OleCreateLinkFromData
CoGetPSClsid
StgOpenStorageOnILockBytes

advapi32

OpenThreadToken
CreatePrivateObjectSecurity
ConvertToAutoInheritPrivateObjectSecurity
GetSidIdentifierAuthority
AccessCheckAndAuditAlarmW
GetSecurityDescriptorControl
GetSidLengthRequired
LookupPrivilegeNameA
AccessCheck

gdi32

CreateBitmapIndirect
CreateDCW
AddFontResourceA
CreateBitmap
Arc
AddFontResourceExA
CreateBrushIndirect

ws2_32

setsockopt
listen
getprotobynumber
getsockopt
bind
gethostname
ntohs

kernel32

HeapReAlloc
HeapAlloc
GetConsoleCP
LoadLibraryW
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
DecodePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapFree
GetLastError
HeapDestroy
HeapCreate
CreateFileA
GetSystemDefaultLCID
GetLongPathNameW
LoadLibraryA
DeleteCriticalSection
LockResource
GlobalFix
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d409a588411c54878a33e7599e8ce93e

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

gdi32

ws2_32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 10KB - Virtual size: 19KB

.rsrc Size: 165KB - Virtual size: 164KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 10KB - Virtual size: 19KB

.rsrc
Size: 165KB - Virtual size: 164KB