e8bc51de54e5939d6354b24db2b9f39d0ace0c6ffb9d448d05f209ad4fdbf227

Sharing

Copy URL

Twitter E-mail

General

Target

e8bc51de54e5939d6354b24db2b9f39d0ace0c6ffb9d448d05f209ad4fdbf227
Size

127KB
MD5

d464162f8733fe7314119d8e72b52d5f
SHA1

49eacc61b52d298ef2d620da7663a057a70968fc
SHA256

e8bc51de54e5939d6354b24db2b9f39d0ace0c6ffb9d448d05f209ad4fdbf227
SHA512

a47d15e63e338fec81b85defc6136ffcc394a897411d60c9db0c53448e9384b4f1004727eae59f8c729ff52b459050e523b692bf715bfe3453d0a6df1315572d
SSDEEP

3072:udUo5nWTkStvJ+prtliH4+EvokIg80JxpiEt0P:+WTorlwMvoIDeP

Score

N/A

Malware Config

Signatures

Files

e8bc51de54e5939d6354b24db2b9f39d0ace0c6ffb9d448d05f209ad4fdbf227
.exe windows x86

5527bd7d171e92ba200c1f0101de7f94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
SetStdHandle
LoadLibraryW
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
HeapReAlloc
CreateFileA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
WriteFile
CloseHandle
ExitProcess
GetTimeZoneInformation
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
WriteConsoleW
GetSystemTime
LocalFree
GetCurrentProcessId
GetVersionExA
GetNativeSystemInfo
GetCurrentThreadId
GetSystemInfo
GetLastError
GlobalUnlock
lstrlenW
IsDBCSLeadByte
HeapCreate
Sleep
FormatMessageA
SetEvent
GlobalLock
HeapAlloc
lstrlenA
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
CreateFileW

user32

GetCursorInfo
RegisterClassA
EndPaint
ClientToScreen
GetMessageA
CloseClipboard
GetClassNameA
GetDlgItemInt
GetWindowRect
IsMenu
InsertMenuItemA
PostQuitMessage
FillRect
GetMenuItemID
GetSubMenu
GetFocus
LoadBitmapA
GetParent
AttachThreadInput
WindowFromPoint
GetClientRect
SendMessageA
SetRectEmpty
BeginPaint
GetIconInfo
GetDC
GetWindowThreadProcessId
OffsetRect
GetForegroundWindow
MapVirtualKeyA
SetRect
InvalidateRect
GetClipboardData
CreateWindowExA
GetDCEx
ReleaseDC
SetClassLongA
DrawStateW
ChangeClipboardChain
GetDlgItem
DefWindowProcA
GetSysColor
SetWindowPos
GetCursorPos
IsWindow
PostMessageA
DispatchMessageA
GetCursor
OpenClipboard
SystemParametersInfoA
GetSystemMetrics
LoadImageA
UpdateWindow
GetDlgItemTextA
SetClipboardViewer
DrawFrameControl

gdi32

GetBitmapBits
MoveToEx
BitBlt
GetTextExtentPoint32W
PatBlt
LineTo
SetTextColor
CreateFontIndirectA
SetBkColor
GdiFlush
DeleteObject
SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
GetTextExtentPointW
GetBkColor
SelectPalette
CreatePatternBrush
PolyBezier
GetTextMetricsA
CreateICA
GetStockObject
CreateSolidBrush
TextOutA
DeleteDC

advapi32

RegCloseKey
FreeSid
AllocateAndInitializeSid
RegCreateKeyExA
SetTokenInformation
RegQueryValueExA
RegSetValueExA

ole32

CoGetMalloc
CoTaskMemAlloc

oleaut32

OleCreateFontIndirect

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5527bd7d171e92ba200c1f0101de7f94

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 66KB - Virtual size: 66KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 10KB - Virtual size: 17KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 66KB - Virtual size: 66KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 10KB - Virtual size: 17KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 6KB - Virtual size: 6KB