53a80461ddcd9b6c885cbd63f6deb867815c60a189e6754891e4f13f71feeb6f

Sharing

Copy URL

Twitter E-mail

General

Target

53a80461ddcd9b6c885cbd63f6deb867815c60a189e6754891e4f13f71feeb6f
Size

4.2MB
MD5

de9eadc49d5be342ac805de6b24662df
SHA1

9f5c0aaa3a7440ab04091cd49cd8a42a1ef65922
SHA256

53a80461ddcd9b6c885cbd63f6deb867815c60a189e6754891e4f13f71feeb6f
SHA512

5a2fa3059df75a1e52b56af23ec5fbf4e0035e3749e4811eaa03da6f89f26506a67dde3b8b36ed1066bd79056b0d154e1dda6e0224eda19fe094eebe531baecc
SSDEEP

98304:nHyu3FMNc0kSHaRxfyDII7YJ372FeZP5Hiyc+shFkevFrmyerz/rg0:nfH0ARxfyACyc+shFFMrz/rg

Score

N/A

Malware Config

Signatures

Files

53a80461ddcd9b6c885cbd63f6deb867815c60a189e6754891e4f13f71feeb6f
.exe windows x86

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
GetCurrentProcessId
FileTimeToSystemTime
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcess
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
SetLastError
CreateFileW
GetLastError
HeapAlloc
GetTempPathA
ResumeThread
GetCurrentThread
Sleep
GetLocalTime
DuplicateHandle
CreateMutexA
GetModuleHandleExW
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
HeapReAlloc
GetProcAddress
LoadLibraryA
LeaveCriticalSection
RemoveDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
HeapFree
CreateFileA
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetStringTypeW
GetStartupInfoW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyA
RegCreateKeyA
RegQueryInfoKeyA

user32

PostMessageA
SetWindowPos
GetWindowTextW
GetWindowRect
UpdateWindow
CheckMenuItem
RedrawWindow
DispatchMessageA
PostQuitMessage
GetMessageW
GetLastInputInfo
ShowWindow
PeekMessageW
CreateWindowExA
SetFocus
SetForegroundWindow
TrackPopupMenu
BringWindowToTop
GetParent
LoadIconA
PeekMessageA
EnumWindows
SendMessageW
DefWindowProcW
RegisterWindowMessageA
MessageBoxA
DispatchMessageW
GetDesktopWindow
MsgWaitForMultipleObjects
CreatePopupMenu
RegisterClassExA
LoadIconW
RegisterWindowMessageW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1b2283499f88f914f19bd780d778914

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 86KB - Virtual size: 96KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 86KB - Virtual size: 96KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 24KB - Virtual size: 23KB