627a8f66ca021eb8a619af54c640ab7be315d020fa2520d4bc92dbb125a63d3d

Sharing

Copy URL

Twitter E-mail

General

Target

627a8f66ca021eb8a619af54c640ab7be315d020fa2520d4bc92dbb125a63d3d
Size

216KB
MD5

ab2dd7793af3276096a3b0b886135ebc
SHA1

26c7020a3f276412c751138bfff62b59343a61a9
SHA256

627a8f66ca021eb8a619af54c640ab7be315d020fa2520d4bc92dbb125a63d3d
SHA512

7de1e7eb21c4f800154774b7805d2026c0d73b0457722bc453a08270c36bc4a726bcf17c941fcfab3392b1fa15ed5a94bd303aa85f57a24b7dfc3985f336f456
SSDEEP

6144:iyKJEPV/zuy6j5pD/bDi6EyfjWu4aU3hkl4uHACTuwFPf:i3K/zuy6j5l/SyfCuA0hxf

Score

N/A

Malware Config

Signatures

Files

627a8f66ca021eb8a619af54c640ab7be315d020fa2520d4bc92dbb125a63d3d
.exe windows x86

5f0922d5f78039bff6488467d81e44ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
GetSysColor
GetWindowLongW
GetWindow
GetSystemMetrics
SetWindowTextW
GetWindowTextW
SetWindowPos
GetWindowRect
LoadStringW
wvsprintfW
SendMessageW
GetDC
GetClientRect
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

shell32

SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW
SHGetMalloc
ShellExecuteA

ole32

CLSIDFromString
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoUninitialize

gdi32

GetObjectW
CreateDIBSection
GetDeviceCaps
DeleteObject

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameW
PathFindExtensionW
PathFindFileNameA
SHAutoComplete
PathIsUNCW
PathStripToRootW

kernel32

ReadFile
GetLocaleInfoA
HeapSize
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryA
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
WriteConsoleW
SetStdHandle
CompareStringA
SetEnvironmentVariableA
CompareStringW
CreateFileA
GetStringTypeW
IsDebuggerPresent
RtlUnwind
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
VirtualAlloc
HeapAlloc
GetSystemTimeAsFileTime
ExitThread
CloseHandle
GetLastError
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
GetTimeZoneInformation
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 510.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f0922d5f78039bff6488467d81e44ca

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

ole32

gdi32

comctl32

shlwapi

kernel32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 7KB - Virtual size: 510.6MB

.rsrc Size: 121KB - Virtual size: 120KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 7KB - Virtual size: 510.6MB

.rsrc
Size: 121KB - Virtual size: 120KB