76656de28ec734c397c1d50f7bd61f1fd0f73f08b73af0f87c2a7bb2013cb5c2

Sharing

Copy URL

Twitter E-mail

General

Target

76656de28ec734c397c1d50f7bd61f1fd0f73f08b73af0f87c2a7bb2013cb5c2
Size

881KB
MD5

0e2799a3e9f835c79364929ebd42f5d0
SHA1

bf5b89513999a41be64b0c1cf4062d918d931bd7
SHA256

76656de28ec734c397c1d50f7bd61f1fd0f73f08b73af0f87c2a7bb2013cb5c2
SHA512

8f73efd382a91312db15483f4251816ce47750f21c714af67bfd3faba11b8493c412c9326e48a68a7d52c4ecf125bf8837dfbc4615d56ef03378a923f1f3fc93
SSDEEP

12288:CpRZPGFMuMnXRME1YOyGJBtquBWVbYmcCNT6bKiS9FT6Jwds/:MZPGN8hMZFuynY7CUbu9FWwd6

Score

N/A

Malware Config

Signatures

Files

76656de28ec734c397c1d50f7bd61f1fd0f73f08b73af0f87c2a7bb2013cb5c2
.exe windows x86

3f0c5f7f42f1e75dcb67b84ed568830f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
OpenMutexA
GetModuleFileNameA
GetModuleHandleA
CreateWaitableTimerW
IsDebuggerPresent
GetVersion
FlushInstructionCache
FlushFileBuffers
CloseHandle
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleFileNameW
GetConsoleCP
GetTickCount
GetModuleHandleW
GetCurrentProcess
GetCPInfo
GetComputerNameA
GetCommandLineW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

user32

GetWindowTextLengthW
GetWindowRect
LoadCursorW
GetForegroundWindow
GetWindowLongW
IsWindowUnicode
GetDesktopWindow
GetCursorPos
GetProcessDefaultLayout

comdlg32

GetSaveFileNameA
GetFileTitleA
GetFileTitleW
FindTextW
GetSaveFileNameW
GetOpenFileNameW
FindTextA
GetOpenFileNameA

advapi32

GetUserNameA
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 770KB - Virtual size: 770KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f0c5f7f42f1e75dcb67b84ed568830f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 42KB - Virtual size: 42KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 770KB - Virtual size: 770KB

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 42KB - Virtual size: 42KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 770KB - Virtual size: 770KB