9757dd0dee3e9c684c39ec089835631f23125f97fd353e63af24cc05a42408f3

Sharing

Copy URL

Twitter E-mail

General

Target

9757dd0dee3e9c684c39ec089835631f23125f97fd353e63af24cc05a42408f3
Size

4.4MB
MD5

6e2d91d239ed57ba446e13c89a996abd
SHA1

f3f2686b8b94628b67f2646861484c2d83d43ef3
SHA256

9757dd0dee3e9c684c39ec089835631f23125f97fd353e63af24cc05a42408f3
SHA512

e6ef38e2d55c1768c5545f65c4c7492c4a488f1420e6c1bb497174bbad6428c0c2d8fcf76e4fd406296d89aaeb4532e93ae5fbe0a52f6de10190a4759b9f38f8
SSDEEP

98304:5kZOwBOMFeJQ2xRjTuUsLBasKovIOR0oHws8SzKV8pjRr/yIVvM1wjYYBmxPb/p1:5gnleQ1i+U33BzQYsER

Score

N/A

Malware Config

Signatures

Files

9757dd0dee3e9c684c39ec089835631f23125f97fd353e63af24cc05a42408f3
.exe windows x86

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
HeapAlloc
HeapFree
SetLastError
DisableThreadLibraryCalls
GetProcessId
CreateFileW
LeaveCriticalSection
GetLocalTime
WaitForSingleObjectEx
AddVectoredExceptionHandler
GetModuleHandleExW
Sleep
DeleteCriticalSection
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetLastError
DuplicateHandle
GetCurrentProcess
CreateMutexA
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA

user32

CheckMenuItem
RedrawWindow
CloseDesktop
DispatchMessageA
PostQuitMessage
TranslateMessage
ShowWindow
BringWindowToTop
SetWindowPos
RegisterWindowMessageW
PeekMessageW
PeekMessageA
LoadIconA
AppendMenuW
UpdateWindow
RegisterClassExW
SendMessageA
CreateWindowExA
FindWindowA
GetDlgItem
RegisterWindowMessageA
MessageBoxW
TrackPopupMenu
GetLastInputInfo
SendMessageW
GetCursorPos
DestroyWindow
RegisterClassExA
MsgWaitForMultipleObjects
SetForegroundWindow
GetWindowTextW
SetFocus
GetWindowTextA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 97KB - Virtual size: 107KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 97KB - Virtual size: 107KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 25KB - Virtual size: 25KB