2de248c593c015ed53bb15e24e652ebc12bc5c54e847ac89ab3b45e9980b577b

Sharing

Copy URL Twitter E-mail

General

Target

2de248c593c015ed53bb15e24e652ebc12bc5c54e847ac89ab3b45e9980b577b
Size

851KB
MD5

525f5e1dae230ee3065f044ac961e4f0
SHA1

bfc141ef1a67e1fc11aa7e3a2ea5cc8040d4e4df
SHA256

2de248c593c015ed53bb15e24e652ebc12bc5c54e847ac89ab3b45e9980b577b
SHA512

eed6b02e5ad71299cb442895a8a017ec9e0b46b22bf0368707bc2f8df46114c968028e6ee338e5fc4f02b944ffa6260658f6a2e1405a9fe45f1d24684e1af847
SSDEEP

3072:wNqm6bWUHTIxFXJiegge/gf1zWlWaOAVpJshXnLIWpUQCn8dE6:rm6bWUHmFVr1zWYmsh7xan8P

Score

N/A

Malware Config

Signatures

Files

2de248c593c015ed53bb15e24e652ebc12bc5c54e847ac89ab3b45e9980b577b
.exe windows x86

c2963572747db2fcfa1c66b87d16c245

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
CreateCompatibleDC
CreateDIBitmap
CreatePalette
DeleteDC
DeleteObject
ExtTextOutW
GetGraphicsMode
GetObjectW
RealizePalette
SelectObject
SelectPalette

kernel32

VirtualAlloc
AssignProcessToJobObject
CloseHandle
CommConfigDialogW
FillConsoleOutputCharacterW
FindResourceW
FreeLibrary
LoadResource
LockResource
ReleaseMutex
SetFileTime
SizeofResource
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
RaiseException
HeapFree
SetFilePointer
SetHandleCount
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
RtlUnwind
GetLocaleInfoW
GetLocaleInfoA
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
CreateFileA
FlushFileBuffers
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

oleaut32

VarUI4FromI2

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 511KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c2963572747db2fcfa1c66b87d16c245

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

oleaut32

Sections

.text Size: 179KB - Virtual size: 179KB

.rdata Size: 155KB - Virtual size: 154KB

.data Size: 511KB - Virtual size: 523KB

.text
Size: 179KB - Virtual size: 179KB

.rdata
Size: 155KB - Virtual size: 154KB

.data
Size: 511KB - Virtual size: 523KB