0e2d223e692e2fa2db8c8710be02aeac69fd033a3c21ac16a2d88cf97db05d86

Sharing

Copy URL Twitter E-mail

General

Target

0e2d223e692e2fa2db8c8710be02aeac69fd033a3c21ac16a2d88cf97db05d86
Size

571KB
MD5

f4a0bc5d88f7ba5fc6b047024119c71c
SHA1

f435e095c3af39c4db5836ba859906ae30a16e7f
SHA256

0e2d223e692e2fa2db8c8710be02aeac69fd033a3c21ac16a2d88cf97db05d86
SHA512

aa81a01fd7490dc750f9a0ef4e5d97ee4a8c49d45ad8d50fdb27bf950f61aa0df1921b6464ca18ce5e8b13252fda69889ece809d0c864aae109c3f72fde059b2
SSDEEP

12288:mYcJ8USOzh7WbXTVmamdhxYSGDg6PAbib:c8YGDVodhuSylPAu

Score

N/A

Malware Config

Signatures

Files

0e2d223e692e2fa2db8c8710be02aeac69fd033a3c21ac16a2d88cf97db05d86
.exe windows x86

3e94816150d2a3e6c690a114a3a2ea51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetEndOfFile
RtlUnwind
FreeEnvironmentStringsA
VirtualFree
HeapDestroy
GetStdHandle
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
ExitProcess
HeapReAlloc
GetDateFormatA
GetACP
SetCommBreak
SetCommTimeouts
CreatePipe
LocalAlloc
GetWindowsDirectoryA
CreateEventA
GetOverlappedResult
CreateFileMappingA
CreateProcessA
WideCharToMultiByte
GlobalLock
GlobalFree
lstrcpynA

user32

CreateMenu
GetDoubleClickTime
FindWindowA
DefWindowProcA
SetWindowPos
GetClientRect
SetWindowTextA
DestroyCaret
EnableMenuItem
TrackPopupMenu
SetKeyboardState
GetMessageTime
CheckMenuItem
FlashWindow
RegisterClipboardFormatA
SetClipboardData
SetCaretPos
SetClassLongA
ShowCursor
GetSystemMetrics
EnableWindow
SetActiveWindow
SetWindowPlacement
SetCapture
SetDlgItemTextA
GetWindowRect

gdi32

ExcludeClipRect
DeleteDC
CreateCompatibleDC
SetTextColor
CreateSolidBrush
SelectObject
GetDeviceCaps
CreateFontA
SelectPalette
ExtTextOutA
ExtTextOutW
GetObjectA
SetPixel
GetCharWidthA
SetPaletteEntries

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pt
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lbt
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.peh
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e94816150d2a3e6c690a114a3a2ea51

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 437KB - Virtual size: 437KB

.rsrc Size: 49KB - Virtual size: 49KB

.idata Size: 2KB - Virtual size: 1KB

.pt Size: 37KB - Virtual size: 36KB

.lbt Size: 27KB - Virtual size: 26KB

.peh Size: 17KB - Virtual size: 16KB

.text
Size: 437KB - Virtual size: 437KB

.rsrc
Size: 49KB - Virtual size: 49KB

.idata
Size: 2KB - Virtual size: 1KB

.pt
Size: 37KB - Virtual size: 36KB

.lbt
Size: 27KB - Virtual size: 26KB

.peh
Size: 17KB - Virtual size: 16KB