e8e98ad2b3818d8b82c72a6de220d6c99f30380cbdb42ae2f6796d4ec763e2ff

Sharing

Copy URL Twitter E-mail

General

Target

e8e98ad2b3818d8b82c72a6de220d6c99f30380cbdb42ae2f6796d4ec763e2ff
Size

404KB
MD5

04806c444f10fc0661bb9e7c7baa9b63
SHA1

ba5c935573dd7943e563d2282cfc46a8ee754753
SHA256

e8e98ad2b3818d8b82c72a6de220d6c99f30380cbdb42ae2f6796d4ec763e2ff
SHA512

b0e403028f954307d7418f267ad8051b59114460d4b575efa8916daa1021e4875b522370c809f02910d8c3aa9038cf918f4c600d2618ee088f5b0cb49f0057af
SSDEEP

12288:IzQUu9O1vB8OKB+Wc6dVC/drvJ4CzlUBfmj:IU9O1GO++edV2B4CzlUBa

Score

N/A

Malware Config

Signatures

Files

e8e98ad2b3818d8b82c72a6de220d6c99f30380cbdb42ae2f6796d4ec763e2ff
.exe windows x86

f98c59ce4b7e305c6d18acba91fdc14d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
MultiByteToWideChar
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
FlushFileBuffers
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
CreateFileW
GetLastError
GetCurrentThread
SetThreadPriority
GetThreadPriority
WriteFile
WaitForSingleObject
CloseHandle
HeapCreate
HeapAlloc
GetProcAddress
GetSystemTimeAsFileTime
EnumSystemCodePagesW
GetNumberOfConsoleInputEvents
SetLastError
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryA
GetEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
IsProcessorFeaturePresent
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess
GetModuleHandleW
RtlUnwind
RaiseException
HeapFree

user32

EmptyClipboard
CloseClipboard
EndDialog
GetParent
SetWindowTextA
GetSystemMenu
CopyImage
DestroyMenu
EnableMenuItem
LoadStringA
GetMessageA
InsertMenuA
RegisterClassA
EndPaint
SetClipboardData
GetWindowTextA
GetDC
FillRect
ReleaseDC
OpenClipboard
GetDlgItemTextW
LoadCursorA
CreateMenu
CreateWindowExA
PostThreadMessageA
MessageBoxA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SendMessageA
EnableWindow
CreateDialogParamA
SetDlgItemTextA
DestroyWindow
DestroyAcceleratorTable

gdi32

CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
CreatePalette
StartDocA
StartPage
TextOutA
EndPage
EndDoc
GetTextMetricsA
GetStockObject
PatBlt
CombineTransform

comdlg32

PrintDlgA

advapi32

CryptEnumProviderTypesA

shell32

CommandLineToArgvW

ole32

CoSuspendClassObjects
CoInitialize

psapi

GetProcessMemoryInfo

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

crypt32

CryptEncodeObjectEx

rpcrt4

UuidCreate
RpcStringFreeA
UuidToStringA

gdiplus

GdiplusStartup
GdipFree
GdipAlloc
GdipLoadImageFromFile
GdipDisposeImage
GdipSaveImageToFile
GdipCloneImage
GdiplusShutdown

setupapi

SetupDiGetClassDevsA

powrprof

GetPwrDiskSpindownRange

Sections

.text
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f98c59ce4b7e305c6d18acba91fdc14d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

psapi

version

crypt32

rpcrt4

gdiplus

setupapi

powrprof

Sections

.text Size: 322KB - Virtual size: 321KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 38KB - Virtual size: 37KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 322KB - Virtual size: 321KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 38KB - Virtual size: 37KB

.reloc
Size: 8KB - Virtual size: 8KB