daa9989ab2e6179d38df1780584be79ab9c5414c6daf5bceb4f6226b09986d81

Sharing

Copy URL Twitter E-mail

General

Target

daa9989ab2e6179d38df1780584be79ab9c5414c6daf5bceb4f6226b09986d81
Size

276KB
MD5

5b1198e6cace9d8199e8cf637d903f60
SHA1

9cd8a83b581f3dc8655f24fd4a28c1e9d06004c2
SHA256

daa9989ab2e6179d38df1780584be79ab9c5414c6daf5bceb4f6226b09986d81
SHA512

d9d95f3640de620bda0e02cc208d2e222ba00a8178fd412f70baff20438be23c69f5746129456c20936376ce04bc3729943a8d9a4d2e60e46dd5605cda4f6be1
SSDEEP

6144:12NebKOjKEcsACWpjw5lHUAAig1Nc7TbaFK8LHpAt:12IbHjJcswjwrHUuNh8LHpY

Score

N/A

Malware Config

Signatures

Files

daa9989ab2e6179d38df1780584be79ab9c5414c6daf5bceb4f6226b09986d81
.exe windows x86

0e6c3c72b335b1ffbb03693c16967d56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuDefaultItem
CallNextHookEx
IsZoomed
OpenDesktopA
SetCursorPos
DestroyWindow
CountClipboardFormats
SetUserObjectSecurity
EqualRect
GetDlgItemTextW
DlgDirSelectComboBoxExW
CharToOemW
GetClientRect

shell32

DragAcceptFiles
DragQueryFileW
ExtractIconExW
ShellAboutW
DuplicateIcon
ExtractIconW
ExtractIconExA
DragFinish

ole32

StgCreateDocfile
StgIsStorageFile
OleNoteObjectVisible
MonikerRelativePathTo

gdi32

Chord
ColorMatchToTarget
Arc
BitBlt
CloseFigure

opengl32

glVertex3d
glTexCoord4f
glEvalCoord1f
glRectf
glTexCoord1d
glColor3usv
glIndexf
glRasterPos3d

kernel32

SetStdHandle
WriteConsoleW
HeapSize
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
CreateFileW
Sleep
HeapFree
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
LoadLibraryW
IsDebuggerPresent
GetTickCount
QueryPerformanceCounter
HeapCreate
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GetModuleFileNameA
CloseHandle
GetLastError
WaitForMultipleObjects
CreateThread
CreateEventA
SetEvent
ConvertDefaultLocale
LocalFileTimeToFileTime
EndUpdateResourceW
FindResourceExA
EnumCalendarInfoExA
WideCharToMultiByte
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e6c3c72b335b1ffbb03693c16967d56

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

gdi32

opengl32

kernel32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 225KB - Virtual size: 225KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 225KB - Virtual size: 225KB