8c42414be5a7f5e9a6c815081f30b590ca00d0d849ee9e12584727b731e277ef

Sharing

Copy URL

Twitter E-mail

General

Target

8c42414be5a7f5e9a6c815081f30b590ca00d0d849ee9e12584727b731e277ef
Size

408KB
MD5

0998745cef26190da843f62db352a540
SHA1

46966f09d513039c5b6311865adddff2e52a88e4
SHA256

8c42414be5a7f5e9a6c815081f30b590ca00d0d849ee9e12584727b731e277ef
SHA512

bcc04fb0800970a82775ebc73ffc88c269961a7b14c77a516516ece1ace709c881fec1e58617ca05b88dc0bc92ec8e7a7f311ca00790dcea91ced2bec88d7aad
SSDEEP

6144:wc1aCuVzCv4u12NtMPiZxWQ6Sro+jAlAbmlMfUcLzH3ljY98rc/b5K:wTzCQhkPyNroybmlotLhY0A5K

Score

N/A

Malware Config

Signatures

Files

8c42414be5a7f5e9a6c815081f30b590ca00d0d849ee9e12584727b731e277ef
.exe windows x86

e39dc8134e98d44b6ed2d76b8f20cedc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalFree
VirtualQuery
GetCurrentThread
GetLastError
lstrcmpiA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryDosDeviceA
lstrcmpA
GlobalSize
DeviceIoControl
CloseHandle
GetVolumeInformationA
MultiByteToWideChar
SetLastError
LoadResource
LockResource
GetTickCount
GetLocalTime
SystemTimeToFileTime
QueryPerformanceCounter
lstrlenA
lstrcmpW
VirtualFree
ExitThread
SetEndOfFile
OutputDebugStringA
GetVersion
GlobalFindAtomA
GlobalAlloc
GlobalAddAtomA
GlobalDeleteAtom
GlobalFree
LocalAlloc
LocalLock
CreateFileA
LocalUnlock

user32

RegisterClassA
IsWindow
RegisterClipboardFormatA
wsprintfA
CharNextA
IsWindowVisible
SetWindowTextA
AdjustWindowRectEx
GetTopWindow
AnimateWindow
GetDesktopWindow
GetPropA
RemovePropA
DefWindowProcA
EnumChildWindows
CreateWindowExA
SetWindowLongA
GetParent
GetWindowLongA
GetWindow
GetWindowThreadProcessId
IsChild
GetClassNameA

gdi32

SetLayout

advapi32

RegQueryValueA
SetThreadToken
RegOpenUserClassesRoot
OpenProcessToken
RegCloseKey
RegOpenKeyExA

msvcrt

malloc
memset
free

shlwapi

PathFindFileNameA
PathCombineA

Sections

.text
Size: 320KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e39dc8134e98d44b6ed2d76b8f20cedc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

shlwapi

Sections

.text Size: 320KB - Virtual size: 318KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: 320KB - Virtual size: 318KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 40KB - Virtual size: 37KB