5ff0f461c705438c8936a3769cdffdbb5733dca511035a621626bfc7832038c8

Sharing

Copy URL Twitter E-mail

General

Target

5ff0f461c705438c8936a3769cdffdbb5733dca511035a621626bfc7832038c8
Size

3.1MB
MD5

db58efc0db5385ddca9f6de1e7839b8f
SHA1

115ba623974d6ae35dfd35946476970027cc24dc
SHA256

5ff0f461c705438c8936a3769cdffdbb5733dca511035a621626bfc7832038c8
SHA512

0ef5a8f942694f230f588e4e9ab4147c382d7db30ee5a4795a26e0134c3cf90d736612c63bfd150d005fd4c9e78cc926bdfbc7c50772ce7492819eb1f6f73798
SSDEEP

49152:y8kO2hSVcxKLvOxyZsZOOacQn/R/oJM1Ne9yTDtxsAkzhiLrm:BkRkLhOZ6eJJATr3kzhiL

Score

N/A

Malware Config

Signatures

Files

5ff0f461c705438c8936a3769cdffdbb5733dca511035a621626bfc7832038c8
.exe windows x86

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
HeapFree
SetLastError
DisableThreadLibraryCalls
GetProcessId
CreateFileW
LeaveCriticalSection
GetLocalTime
WaitForSingleObjectEx
AddVectoredExceptionHandler
GetModuleHandleExW
Sleep
DeleteCriticalSection
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetLastError
DuplicateHandle
GetCurrentProcess
CreateMutexA
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA

user32

CheckMenuItem
RedrawWindow
CloseDesktop
DispatchMessageA
PostQuitMessage
TranslateMessage
ShowWindow
BringWindowToTop
SetWindowPos
RegisterWindowMessageW
PeekMessageW
PeekMessageA
LoadIconA
AppendMenuW
UpdateWindow
RegisterClassExW
SendMessageA
CreateWindowExA
FindWindowA
GetDlgItem
RegisterWindowMessageA
MessageBoxW
TrackPopupMenu
GetLastInputInfo
SendMessageW
GetCursorPos
DestroyWindow
RegisterClassExA
MsgWaitForMultipleObjects
SetForegroundWindow
GetWindowTextW
SetFocus
GetWindowTextA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 97KB - Virtual size: 107KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 97KB - Virtual size: 107KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 25KB - Virtual size: 25KB