606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c

Sharing

Copy URL

Twitter E-mail

General

Target

606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c
Size

137KB
MD5

11c15bcc555195f8e29b35cdb9f4a27b
SHA1

aeee251a75338404c2f181ea34fa7a81b9dc1730
SHA256

606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c
SHA512

0545edd1a0832746c447d893fa367992051921acec18de075696566244644a3747317dfca0cdc41036166ab50e74b9f3de596d8a7c2be00943fbf1dd78c18a93
SSDEEP

3072:D8dWLdcvNZVaHeaqUPAgQwgYGxx2gckR:D8d++ZVa2U0MGKgc+

Score

N/A

Malware Config

Signatures

Files

606b5179a40b830d209c57548118b89bda1af71441c9a446a568beaa6d83a38c
.exe windows x86

1675a1d4c5f0e3b1b7b5dca3b9ca59f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
LoadLibraryA
GetProcAddress
FindFirstFileA
TlsSetValue
FindNextFileA
CreateFileA
VirtualAlloc
GetModuleFileNameA
GetFileSize
CloseHandle
GetFileAttributesA
TlsAlloc
GetLastError
TlsFree
GetFileType
SetFilePointer
TlsGetValue
ExitProcess
GetModuleHandleA
VirtualFree
WriteFile
GetTickCount

api-ms-win-crt-runtime-l1-1-0

terminate
_errno
_register_onexit_function
exit
strerror
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_initialize_onexit_table
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_controlfp_s
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

fwrite
__acrt_iob_func
_set_fmode
__p__commode
__stdio_common_vfprintf

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

user32

GetMenuItemCount
SetWindowLongA
CallNextHookEx
SetTimer
KillTimer
GetMessageA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
RegisterClassA
DestroyMenu
CreateWindowExA
DestroyWindow
PostQuitMessage
GetWindowLongA
DefWindowProcA

gdi32

CreateBrushIndirect
PolylineTo
SelectObject
SetArcDirection
SetDIBits

oleaut32

SafeArrayAllocDescriptor
SafeArrayDestroy

ole32

CoTreatAsClass

advapi32

RegOverridePredefKey
GetLengthSid

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.objc_im
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1675a1d4c5f0e3b1b7b5dca3b9ca59f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

user32

gdi32

oleaut32

ole32

advapi32

Sections

.text Size: 78KB - Virtual size: 77KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 3KB

.objc_im Size: 512B - Virtual size: 8B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 3KB

.objc_im
Size: 512B - Virtual size: 8B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 5KB - Virtual size: 5KB