55cc5179ee7e88eff6a73be36b15252c2ef02f3aebb9feb70cf0c4c6e956c4ee

Sharing

Copy URL Twitter E-mail

General

Target

55cc5179ee7e88eff6a73be36b15252c2ef02f3aebb9feb70cf0c4c6e956c4ee
Size

120KB
MD5

0e0c6468c875b6f95fdc9316e4713a26
SHA1

14c691b5c748eb4bf7d6ec7673c8695844a80f09
SHA256

55cc5179ee7e88eff6a73be36b15252c2ef02f3aebb9feb70cf0c4c6e956c4ee
SHA512

79d1564b7b47c15a0c27584317904e74aa5b3590f82b796b9ca7d4b2420a04d803c8f7e403b6cce865eba1190e374e46fd19ca0bf18e85ea2a4c482c3c388dfa
SSDEEP

3072:IqAoo91Es3C0J+g4ybZr7rTNl0W/AX2o39:IqRo91Es3PJXNr7r3AX7

Score

N/A

Malware Config

Signatures

Files

55cc5179ee7e88eff6a73be36b15252c2ef02f3aebb9feb70cf0c4c6e956c4ee
.exe windows x86

b761711d593148a5572294cae6af9f5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
GetDC

gdi32

EndPath
CreateColorSpaceW
ColorMatchToTarget
Ellipse
SelectObject
GetStockObject
SetMapMode
SetGraphicsMode
SelectClipPath
TextOutA
BeginPath
CreateFontIndirectA
BitBlt
CombineTransform
CloseMetaFile

kernel32

CreateFileW
TlsSetValue
SetStdHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
LoadLibraryW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
CloseHandle
WriteConsoleW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b761711d593148a5572294cae6af9f5e

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 7KB - Virtual size: 14KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 70KB - Virtual size: 69KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 7KB - Virtual size: 14KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 70KB - Virtual size: 69KB

.reloc
Size: 3KB - Virtual size: 3KB