ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a

Sharing

Copy URL

Twitter E-mail

General

Target

ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a
Size

214KB
MD5

afbda4b02104c0c71c362e079f89c33b
SHA1

158cfd7600ba79c06688712bc60d74971400a4ca
SHA256

ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a
SHA512

abdef2ebebde8a281952b6fb040ca2c2040adf461acb53a4d0d90aee682e027d208d84b4e68c13818217bceea38cb586e119ced0903fb293ced23ed381cc006a
SSDEEP

3072:STtWiHdTYBitXNI/+bZK2FvFK5N2z0BgVTeh8n9f87P7Q2:+tW0TYBIXNIyO2z08Ch8p87Dx

Score

N/A

Malware Config

Signatures

Files

ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a
.exe windows x86

ba4e2a5347c3d44b9472706f42cbea0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EqualRect
DeleteMenu
RedrawWindow
SetWindowsHookExA
GetClassInfoA
EndDeferWindowPos
BeginDeferWindowPos
IsRectEmpty

kernel32

GetLastError
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
VirtualAlloc
GetModuleHandleW
GetLocaleInfoA
IsValidCodePage
GetModuleHandleA
GetStartupInfoW
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetEnvironmentVariableA
GetCurrentThread
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
Sleep
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
IsValidLocale

msi

ord261

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ptext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba4e2a5347c3d44b9472706f42cbea0c

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

msi

Sections

.text Size: 39KB - Virtual size: 39KB

.ptext Size: 5KB - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 61KB - Virtual size: 94KB

.rsrc Size: 102KB - Virtual size: 101KB

.text
Size: 39KB - Virtual size: 39KB

.ptext
Size: 5KB - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 61KB - Virtual size: 94KB

.rsrc
Size: 102KB - Virtual size: 101KB