3dd23c4e62a3290d075a3a95bf4774373ce1928032d209d71e8884b8772c3eac

Sharing

Copy URL Twitter E-mail

General

Target

3dd23c4e62a3290d075a3a95bf4774373ce1928032d209d71e8884b8772c3eac
Size

284KB
MD5

1f4a7f1eea2cfc5955ca622591eb28bb
SHA1

3c07dc1ef0fcb12e284c86488d2a292c767e0510
SHA256

3dd23c4e62a3290d075a3a95bf4774373ce1928032d209d71e8884b8772c3eac
SHA512

1a319e4e3421030ed3de08ed8cb307d3e0fe96042d49c56c48511f47aef3c84f1a0ccc144179ec9d0ec119a014c231677060f80e19f65e194944b088480e0294
SSDEEP

6144:PaLyhkeMkdhcLkWymTj6Q8555nl4vMLwYoumrExz:Pa+hke8jbP+5D4vMojrEV

Score

N/A

Malware Config

Signatures

Files

3dd23c4e62a3290d075a3a95bf4774373ce1928032d209d71e8884b8772c3eac
.exe windows x86

ff1e968265f3268d0b07c81dee17d8ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetWindowsDirectoryA
FlushInstructionCache
GetTempPathW
GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
IsDebuggerPresent
OutputDebugStringA
GetWindowsDirectoryW
VirtualFree
GetTempPathA
GetSystemTime
FlushFileBuffers
CloseHandle
CreateFileA
HeapSize
GetLocaleInfoA
GetTickCount
GetModuleHandleW
OutputDebugStringW
GetCurrentProcess
GetVersion
GetCommandLineW
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException

user32

GetWindowTextLengthW
GetWindowRect
LoadBitmapA
GetForegroundWindow
GetDesktopWindow
GetCursorPos
GetMessageTime
GetMessagePos

advapi32

GetCurrentHwProfileW

Sections

.text
Size: - Virtual size: 30.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff1e968265f3268d0b07c81dee17d8ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: - Virtual size: 30.5MB

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 205KB - Virtual size: 205KB

.text
Size: - Virtual size: 30.5MB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 205KB - Virtual size: 205KB