9b1dc1f0cd28e01b2e4ec715e1eeffbe46243dcfd870e19eab86cc40856cb385

Sharing

Copy URL Twitter E-mail

General

Target

9b1dc1f0cd28e01b2e4ec715e1eeffbe46243dcfd870e19eab86cc40856cb385
Size

146KB
MD5

5220f475c4c2bcb3854238b3967921e0
SHA1

4928c6b1a3bc2954d92bb093d27c59fc1756f44f
SHA256

9b1dc1f0cd28e01b2e4ec715e1eeffbe46243dcfd870e19eab86cc40856cb385
SHA512

afb8750f431c9f03d80846e231148ce0b465d17762fb92605091fd81f1b55283c8478770fa8d243819a1a82b7bfd79f2cd0395ce49e0d3851955851999165fd5
SSDEEP

1536:1T1UM9CW68A8LiXlVltB1iOtTK1rfubvW9m/AkkRU1nU3WF2fhEHicUBbeSgBQ18:z1fLiNtdtDvwm/xkRM7Q10l

Score

N/A

Malware Config

Signatures

Files

9b1dc1f0cd28e01b2e4ec715e1eeffbe46243dcfd870e19eab86cc40856cb385
.exe windows x86

c5f3226aa09e3a0be67093a325f607a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord163

ole32

CoGetClassObject
OleInitialize
CoInitialize
CoInitializeEx
CoDisconnectObject

user32

SetActiveWindow

kernel32

GetModuleHandleA
CompareStringW
CompareStringA
GetTimeZoneInformation
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetCommandLineA
GetCurrentThread
GetProcessVersion
GetTickCount
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetVersionExA
GetEnvironmentStringsW
HeapSize
GlobalAlloc
FormatMessageW
HeapDestroy
FreeLibrary
LoadLibraryExW
GetVersionExW
LoadLibraryA
SetFilePointerEx
TlsFree
LocalFree
WideCharToMultiByte
EnterCriticalSection
ExitProcess
TryEnterCriticalSection
GetStartupInfoA
HeapCreate
FindClose
SetHandleCount
lstrlenW
WaitForSingleObject
LCMapStringW
InterlockedExchange
WriteFile
LocalAlloc
HeapAlloc
GetFileAttributesW
ReadFile
LoadResource
CreateFileA
SizeofResource
SetEndOfFile
LoadLibraryW
CreateEventW
MultiByteToWideChar
SetStdHandle
GetStringTypeW
SetEnvironmentVariableA
SetFilePointer
HeapFree
lstrlenA
GetOEMCP
GetPriorityClass
GetCurrentProcessId
GetEnvironmentStrings
IsDebuggerPresent
GetCommandLineW
GetProcessHeap
GetProcAddress
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
InitializeCriticalSection
GetCPInfo
GetACP
Sleep
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
GetStringTypeA

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5f3226aa09e3a0be67093a325f607a9

Headers

DLL Characteristics

File Characteristics

Imports

msi

ole32

user32

kernel32

Sections

.text Size: 84KB - Virtual size: 84KB

.data Size: 50KB - Virtual size: 50KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 84KB - Virtual size: 84KB

.data
Size: 50KB - Virtual size: 50KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB