99f86bcb6bc66ba636e1c434835ab4942bc144c5a8148e8b4f1d5c720d847614

Sharing

Copy URL

Twitter E-mail

General

Target

99f86bcb6bc66ba636e1c434835ab4942bc144c5a8148e8b4f1d5c720d847614
Size

225KB
MD5

921db6c0e2423a4211ba6aba5639216c
SHA1

a915b4a988adc6bfb66025ab5680e69f1afaf7ab
SHA256

99f86bcb6bc66ba636e1c434835ab4942bc144c5a8148e8b4f1d5c720d847614
SHA512

fed3bf5bb6b9896c15afc1dd54e42977e2a440d1499eb3b4f9fa74951c264875867d9e983f2182044cd9865d2fec9cb1111b5741dba89be8c23b6d8567c7a616
SSDEEP

3072:GIbigRHLhQBpKF5/quUqHAylGPzPZczxW5IuUqHAylGPzPZczxWz:regRHLyBpiqu3MrwWeu3MrwWz

Score

N/A

Malware Config

Signatures

Files

99f86bcb6bc66ba636e1c434835ab4942bc144c5a8148e8b4f1d5c720d847614
.exe windows x86

76ac77980a145a618aae2bc20af03140

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetWindowsDirectoryA
GetConsoleCP
MulDiv
GetSystemDirectoryA
OpenMutexW
GetLastError
GetThreadLocale
VirtualAlloc
IsValidCodePage
OpenMutexA
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
GetVersion
GetCurrentProcessId
GetSystemTime
VirtualFree
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
GetCurrentThread
GetTickCount
GetModuleHandleW
OutputDebugStringW
GetCPInfo
GetSystemDefaultLCID
lstrlenA
GetCommandLineW
GetSystemDefaultLangID
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetACP
GetOEMCP
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

GetWindowTextLengthW
IsIconic
IsZoomed
LoadIconA
GetClientRect
GetWindowTextLengthA
GetForegroundWindow
GetKeyboardLayout
GetWindowTextW
IsWindowUnicode
GetDesktopWindow
LoadBitmapW
GetCursor
GetProcessDefaultLayout
GetMessageTime
GetWindowTextA

gdi32

Rectangle
GetBkColor
SetROP2
GetTextColor
GetCurrentObject

advapi32

RegOpenKeyExA
GetUserNameW
RegOpenKeyExW

shell32

CommandLineToArgvW

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76ac77980a145a618aae2bc20af03140

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 153KB - Virtual size: 152KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 153KB - Virtual size: 152KB