80c549a785d2fe76d57213a926b7685e534001e6857fd72d73705ff50a80e9cf

Sharing

Copy URL Twitter E-mail

General

Target

80c549a785d2fe76d57213a926b7685e534001e6857fd72d73705ff50a80e9cf
Size

646KB
MD5

4571d83e6bbb0bf407d495cef4afa8d0
SHA1

17172784bd4932be506d83bf86ea240f05440d30
SHA256

80c549a785d2fe76d57213a926b7685e534001e6857fd72d73705ff50a80e9cf
SHA512

1ac9470422abaf02c756fbe8ef6ea4eabe32f069f417476b68a690dc62b039cc69dde8f283c1150f6ce0eccbbe8d9c798045f527075b89c3d25bc89fffc6f504
SSDEEP

12288:pWrYTrib7zLIGCEmobZF/wSVb3IpLOOTZosmUDo5KS3fy5gTNXrhQOp6Q1PQZspO:6dlQ1Sii92IPPxrKL8

Score

N/A

Malware Config

Signatures

Files

80c549a785d2fe76d57213a926b7685e534001e6857fd72d73705ff50a80e9cf
.exe windows x86

f981d6d73d43a7bd4c21157976452c9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
DestroyWindow
DrawTextW
GetKeyboardState
CreateCursor
DestroyCursor
GetDlgItemInt
FlashWindowEx
GetKeyState
GetClipboardData
DestroyCaret
ClientToScreen
GetClassNameW
DestroyAcceleratorTable
CloseClipboard
CreateCaret
DialogBoxIndirectParamW
DrawIcon
GetCursorPos
EndDeferWindowPos
GetDesktopWindow
EnableMenuItem
GetDCEx
DestroyIcon
DeferWindowPos
PostMessageW
CreatePopupMenu
GetActiveWindow
FrameRect
GetDlgItemTextW
DrawFocusRect
CreateDialogParamW
CharLowerW
GetDlgCtrlID
CreateMenu
DrawFrameControl
GetFocus
ChangeClipboardChain

kernel32

InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
lstrcpyW
CreateDirectoryW
HeapFree
lstrcatW
CloseHandle
GetProcessHeap
HeapAlloc
GetModuleHandleW
WriteFile
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW

comctl32

ord17
ImageList_Create

Sections

.text
Size: 487KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f981d6d73d43a7bd4c21157976452c9a

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 487KB - Virtual size: 487KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 56KB - Virtual size: 60KB

.rsrc Size: 63KB - Virtual size: 63KB

.text
Size: 487KB - Virtual size: 487KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 56KB - Virtual size: 60KB

.rsrc
Size: 63KB - Virtual size: 63KB