89734a9899e3da4ca5f6b97abbed3b172bf909eaf21e38dc81e232d7bd7ace29

Sharing

Copy URL Twitter E-mail

General

Target

89734a9899e3da4ca5f6b97abbed3b172bf909eaf21e38dc81e232d7bd7ace29
Size

94KB
MD5

af50fd642b3b9970c26ca1ccb9d1cc4f
SHA1

3df7749daf4cf90e6dd9c05480927ec271a7ba87
SHA256

89734a9899e3da4ca5f6b97abbed3b172bf909eaf21e38dc81e232d7bd7ace29
SHA512

388eb471746b55f4b1b7f8411ed8b7449afbdd4c49097675784444406e3501254ec6812dd66fe8edfa4ae6b42180ea272cf5464d9dce9c4a02db477e3f6a5071
SSDEEP

1536:1nh2PZbQe3gAjqF9dUFGDaSou/Wv1qP3GkFgAkUXiR0LWyyyxAfSB2kX:j0gAe9GADaSOG2kzLlyyxOS0kX

Score

N/A

Malware Config

Signatures

Files

89734a9899e3da4ca5f6b97abbed3b172bf909eaf21e38dc81e232d7bd7ace29
.exe windows x86

bce7fe5c3c97634b6ee5759a9eecd137

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
LoadLibraryW
WriteConsoleW
FlushFileBuffers
LCMapStringW
GetStringTypeW
CreateFileW
SetEndOfFile
GetProcessHeap
ReadFile
QueryPerformanceCounter
GetLastError
GetVersion
GetSystemTime
CloseHandle
WaitForSingleObject
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
GetFileSize
GetProcessHeaps
GetProcAddress
CreateEventA
SetEvent
_lcreat
_lwrite
_lclose
OpenProcess
SetStdHandle
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
HeapSize
GetCPInfo
Sleep
DeleteCriticalSection
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
GetModuleHandleW
RtlUnwind
lstrlenW
GetModuleHandleA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
WriteFile
WideCharToMultiByte

user32

SetActiveWindow
LoadStringW
MessageBoxA
DialogBoxParamA
ShowWindow
CreateWindowExA
DialogBoxParamW
LoadImageW
wsprintfA
GetDlgItem
SendMessageA
LoadStringA
ReleaseDC
GetDC
LoadIconW
MessageBoxW
DrawTextA

gdi32

SetBkMode
SetTextColor
GetObjectA
CreateDIBSection
CreateCompatibleDC
SelectObject
GetCurrentObject
GetPaletteEntries
SetDIBColorTable
BitBlt
DeleteDC
DeleteObject
GetDIBits
CreateDCA
GetDeviceCaps
CreateCompatibleBitmap
EnumFontFamiliesA

comdlg32

ReplaceTextW
GetFileTitleW

advapi32

GetTokenInformation
OpenSCManagerW
DuplicateTokenEx
SetNamedSecurityInfoA
GetSecurityDescriptorSacl
GetUserNameW
LookupAccountNameW

shell32

SHGetFileInfoA
SHGetFileInfoW

ole32

CoGetObject
CoInitialize
CoUninitialize

oleaut32

VariantClear
VariantChangeType

ws2_32

WSAAsyncSelect
WSAStringToAddressW
recvfrom
bind
socket
setsockopt
ioctlsocket
htons

netapi32

NetApiBufferFree
NetUserGetInfo
NetLocalGroupEnum

psapi

GetProcessMemoryInfo

userenv

CreateEnvironmentBlock

shlwapi

StrDupA

comctl32

InitCommonControlsEx
ImageList_Create

wtsapi32

WTSEnumerateSessionsA
WTSQueryUserToken

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bce7fe5c3c97634b6ee5759a9eecd137

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

netapi32

psapi

userenv

shlwapi

comctl32

wtsapi32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 18KB - Virtual size: 25KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 18KB - Virtual size: 25KB

.rsrc
Size: 3KB - Virtual size: 3KB