c67ab2280f10323280dc2ccd21808b45659fbe6046cb7cb658b3c995e43b6b9f

Sharing

Copy URL Twitter E-mail

General

Target

c67ab2280f10323280dc2ccd21808b45659fbe6046cb7cb658b3c995e43b6b9f
Size

91KB
MD5

0df4b3ec8327ae8a3caf3fcb0a7fdb86
SHA1

fbb6a5b69a04b28e2b346af896cbaa26805a4ef5
SHA256

c67ab2280f10323280dc2ccd21808b45659fbe6046cb7cb658b3c995e43b6b9f
SHA512

060bf65ce145e5c9770635eda3eea15c76d2a0f8ca2321835f253c84af23cf04c8a541927ed1057fdf70beac7d1921b80aacea99c99359b30e248f1a667cedee
SSDEEP

1536:ME9KFK+BW6BHgk7vSAERcSFmR8hVubGN4ZtioknM8bmhQq9Q/ZkKNCJvubIZq0Pf:F9KFK+BNBHBSAE88cGKLkMmmqqG/fNCn

Score

N/A

Malware Config

Signatures

Files

c67ab2280f10323280dc2ccd21808b45659fbe6046cb7cb658b3c995e43b6b9f
.exe windows x86

ec632f4d6ca6559aa90eb3d80b8fff1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
SetUnhandledExceptionFilter
LocalAlloc
GetCurrentThreadId
GetCurrentProcessId
CreateDirectoryW
GetCurrentProcess
LoadLibraryExW
FreeLibrary
UnhandledExceptionFilter
CreateFileW
WriteFile
MoveFileW
QueryPerformanceCounter
GetModuleFileNameW
GetSystemTimeAsFileTime
GetModuleHandleA
GetTickCount
ExpandEnvironmentStringsW
VirtualAlloc
lstrcmpW
LocalFree
ExitProcess
GetCommandLineA
GetACP
GetStartupInfoA
LoadLibraryA
GetOEMCP
VirtualProtect
FindAtomW
DeleteFileW
GetProcAddress

user32

wsprintfW
DispatchMessageA
SetTimer
GetWindowThreadProcessId
CharNextW
SetWindowLongA
RegisterWindowMessageA
wsprintfA
GetMessageA
GetWindowLongA
CreateWindowExW
KillTimer
LoadStringW
CharUpperW
CharUpperBuffW
FindWindowA
CharLowerBuffW
MessageBoxA
ShowWindow
PostThreadMessageA
PeekMessageW
EnumThreadWindows
ExitWindowsEx
CallWindowProcA
MessageBoxW
SystemParametersInfoA
MsgWaitForMultipleObjects
TranslateMessage

msvcrt

_initterm
_unlock
__dllonexit
?terminate@@YAXXZ
_cexit
exit
_vsnwprintf
??2@YAPAXI@Z
_controlfp
_exit
__setusermatherr
_lock
_XcptFilter
wcschr
_onexit
??3@YAXPAX@Z
iswalpha
strspn
memset

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec632f4d6ca6559aa90eb3d80b8fff1b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 2KB - Virtual size: 37KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 2KB - Virtual size: 37KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 3KB - Virtual size: 2KB