9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb

Sharing

Copy URL

Twitter E-mail

General

Target

9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
Size

165KB
MD5

100bdbff5f76d5e0102878cc6566ad1b
SHA1

d6be6e6331ffd82dcf4dd4732226c779ddfa277a
SHA256

9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
SHA512

5f4755cd09707e4cfe13ae25afded8af7f33e1efef0317329696341ad80dfee09ab9b59f6074733316bc1bdf06f978c26d7ba49f4a1a13a703bb90ca14c324e4
SSDEEP

3072:mLTL/H1R/BNlJVPAL15nWrpLn8niDoElxJm:mPL9R55VPkc8ni1lxM

Score

N/A

Malware Config

Signatures

Files

9f26ed03498e4e07ad8dea5cd72788a5978e0efd12f69b63d8b62aa0b24595fb
.exe windows x86

3f0c5f7f42f1e75dcb67b84ed568830f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
OpenMutexA
GetModuleFileNameA
GetModuleHandleA
CreateWaitableTimerW
IsDebuggerPresent
GetVersion
FlushInstructionCache
FlushFileBuffers
CloseHandle
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleFileNameW
GetConsoleCP
GetTickCount
GetModuleHandleW
GetCurrentProcess
GetCPInfo
GetComputerNameA
GetCommandLineW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

user32

GetWindowTextLengthW
GetWindowRect
LoadCursorW
GetForegroundWindow
GetWindowLongW
IsWindowUnicode
GetDesktopWindow
GetCursorPos
GetProcessDefaultLayout

comdlg32

GetSaveFileNameA
GetFileTitleA
GetFileTitleW
FindTextW
GetSaveFileNameW
GetOpenFileNameW
FindTextA
GetOpenFileNameA

advapi32

GetUserNameA
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f0c5f7f42f1e75dcb67b84ed568830f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 54KB - Virtual size: 54KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 54KB - Virtual size: 54KB