b1e38c3b48098fbe983a61d3b9f92016aa4c8c01d52ce41560df4e5f5d16e579

Sharing

Copy URL Twitter E-mail

General

Target

b1e38c3b48098fbe983a61d3b9f92016aa4c8c01d52ce41560df4e5f5d16e579
Size

175KB
MD5

4594877fd48a1d36b2bc26600c254916
SHA1

a6689e98d4d401381e51477a0aa066e7af3e3c09
SHA256

b1e38c3b48098fbe983a61d3b9f92016aa4c8c01d52ce41560df4e5f5d16e579
SHA512

ae768ae8d7fc5a90daeca99d5854a65eebfa3f24db410fc85dc8bf6c4498e0536bbf14dc5671887cbce016fa8c0a85cfc2efbe38cf7319a01266b8bc8fb6e3ae
SSDEEP

3072:FjiGFwg3frcJZEy1hhF1+ZM8RN56BG6+6e:FjH2mfrOEy1hh+tN5i

Score

N/A

Malware Config

Signatures

Files

b1e38c3b48098fbe983a61d3b9f92016aa4c8c01d52ce41560df4e5f5d16e579
.exe windows x86

7cfcf859f4ea013288a19c6ec76052d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA

kernel32

LoadLibraryA
lstrcpyA
lstrcatA
GetModuleHandleA
GetStartupInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetLastError
SetHandleCount
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA

gdi32

CreateFontIndirectA
DeleteDC
TextOutA
GetPixel
SetBkColor
GetTextExtentPoint32A
CreateFontA
GetObjectA
AnimatePalette
SetPixel
GetCurrentObject
GetTextAlign
GetTextMetricsA
AddFontResourceA
CreateDIBitmap
CreatePen

comctl32

InitCommonControlsEx

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cfcf859f4ea013288a19c6ec76052d6

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

comctl32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 9KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 9KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 4KB