8270240401f67984085dfa3255306a2aa75e9362a19c9245c2b6bc65232e03c9

Sharing

Copy URL

Twitter E-mail

General

Target

8270240401f67984085dfa3255306a2aa75e9362a19c9245c2b6bc65232e03c9
Size

4.1MB
MD5

1a2b64907ed5c16c599db94e8d1ec6d2
SHA1

375012c47c58a06e2dad5ff8b6748c2cf9618048
SHA256

8270240401f67984085dfa3255306a2aa75e9362a19c9245c2b6bc65232e03c9
SHA512

dc864296f838e08c43f2e1335997337ff28c3ab431bb77f5dc529cd0402d253905e2ad9295032038118d116ff614b34e9e5f0684c92668a8f7648cb74e05cfcb
SSDEEP

98304:6kOh1YDuo30kSHG9xfyLII0YJ372FKUP5Hiyc+shUXn6uR3BWV:6RWh009xfyuCyc+shUXn6uR3BW

Score

N/A

Malware Config

Signatures

Files

8270240401f67984085dfa3255306a2aa75e9362a19c9245c2b6bc65232e03c9
.exe windows x86

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetCurrentProcessId
FileTimeToSystemTime
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcess
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
SetLastError
CreateFileW
GetLastError
HeapAlloc
GetTempPathA
ResumeThread
GetCurrentThread
Sleep
GetLocalTime
DuplicateHandle
CreateMutexA
GetModuleHandleExW
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
HeapReAlloc
GetProcAddress
LoadLibraryA
LeaveCriticalSection
RemoveDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
HeapFree
CreateFileA
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyA
RegCreateKeyA
RegQueryInfoKeyA

user32

PostMessageA
SetWindowPos
GetWindowTextW
GetWindowRect
UpdateWindow
CheckMenuItem
RedrawWindow
DispatchMessageA
PostQuitMessage
GetMessageW
GetLastInputInfo
ShowWindow
PeekMessageW
CreateWindowExA
SetFocus
SetForegroundWindow
TrackPopupMenu
BringWindowToTop
GetParent
LoadIconA
PeekMessageA
EnumWindows
SendMessageW
DefWindowProcW
RegisterWindowMessageA
MessageBoxA
DispatchMessageW
GetDesktopWindow
MsgWaitForMultipleObjects
CreatePopupMenu
RegisterClassExA
LoadIconW
RegisterWindowMessageW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.data Size: 86KB - Virtual size: 96KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 86KB - Virtual size: 96KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 24KB - Virtual size: 23KB