fc99b362de51bf7c439a182f3e0712b86f59c3712d1710ed922078643fca9ec3

Sharing

Copy URL

Twitter E-mail

General

Target

fc99b362de51bf7c439a182f3e0712b86f59c3712d1710ed922078643fca9ec3
Size

244KB
MD5

158d2af77aa90011f032713c88a4ce50
SHA1

2f7f4d1888f7ca6a4c3a0f6161caf3ce118dc455
SHA256

fc99b362de51bf7c439a182f3e0712b86f59c3712d1710ed922078643fca9ec3
SHA512

8db9415a660abfea1c2c866938b2d8f130d0f268451dd735975e72306e58e75ff5b75baae31e2beee02d8b9eb397e0f28c6b59d4222e953c527ecbc414ed196d
SSDEEP

3072:aQgstD7trOt9pfslMYO9mXn9H0LeinObM6gZy5ChoTivnHOngzeMjWuHw:ow1rOt9pdYamXnrdbMKwinwA

Score

N/A

Malware Config

Signatures

Files

fc99b362de51bf7c439a182f3e0712b86f59c3712d1710ed922078643fca9ec3
.exe windows x86

ec765718cd21e95c6c69faa7a36786ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
GetProcAddress
GetModuleHandleW
WaitForSingleObject
CreateThread
SetProcessDEPPolicy
VirtualAlloc
IsWow64Process
GetVersionExA
GetCurrentProcess
LoadLibraryExW
GetModuleFileNameW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
TerminateProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
FreeLibrary
CloseHandle
SetProcessShutdownParameters
CreateEventW
RegisterApplicationRestart
GetProcessHeap
SetEvent
HeapFree
HeapAlloc
GetCurrentProcessId
GetLastError
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA

user32

MsgWaitForMultipleObjects
GetThreadDesktop
GetUserObjectInformationW
LoadCursorW
TranslateMessage
RegisterClassW
CreateWindowExW
DispatchMessageW
DefWindowProcW
PeekMessageW
PostQuitMessage

msvcrt

rand_s
_wcsnicmp
_wcsicmp
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_wcmdln
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
wcstok

ole32

CoInitializeEx
CLSIDFromString
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoInitializeSecurity

wininet

InternetGetCookieExW
InternetSetCookieExW

iertutil

ord650
ord35

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ec765718cd21e95c6c69faa7a36786ef

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

ole32

wininet

iertutil

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 203KB - Virtual size: 203KB

.reloc Size: 29KB - Virtual size: 31KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 203KB - Virtual size: 203KB

.reloc
Size: 29KB - Virtual size: 31KB