560ae293a10cdb2b65d103719e1a727235194d514eeea051975c4e63baa966a7

Sharing

Copy URL

Twitter E-mail

General

Target

560ae293a10cdb2b65d103719e1a727235194d514eeea051975c4e63baa966a7
Size

4.4MB
MD5

239e2107e8cd61267ff76a7ca59cb324
SHA1

77e347b9c4e1764006af662425d9bcecb35affbc
SHA256

560ae293a10cdb2b65d103719e1a727235194d514eeea051975c4e63baa966a7
SHA512

1f450ffe00bf856f37c1b53c445c857cd7f03752cf58cd708fe17521b4ec903f9fbb86b4e58391404b6985ff959d661f4404631face7bdcfa1cd6565f3d29925
SSDEEP

98304:skZuABOM1eJGF5967Sc1FMh6ZBrdHFAuPdC7hnq54q60AO41S44NEWFGva3Y/5hZ:sA3FuE58mcHrdRX

Score

N/A

Malware Config

Signatures

Files

560ae293a10cdb2b65d103719e1a727235194d514eeea051975c4e63baa966a7
.exe windows x86

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
HeapAlloc
HeapFree
SetLastError
DisableThreadLibraryCalls
GetProcessId
CreateFileW
LeaveCriticalSection
GetLocalTime
WaitForSingleObjectEx
AddVectoredExceptionHandler
GetModuleHandleExW
Sleep
DeleteCriticalSection
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetLastError
DuplicateHandle
GetCurrentProcess
CreateMutexA
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA

user32

CheckMenuItem
RedrawWindow
CloseDesktop
DispatchMessageA
PostQuitMessage
TranslateMessage
ShowWindow
BringWindowToTop
SetWindowPos
RegisterWindowMessageW
PeekMessageW
PeekMessageA
LoadIconA
AppendMenuW
UpdateWindow
RegisterClassExW
SendMessageA
CreateWindowExA
FindWindowA
GetDlgItem
RegisterWindowMessageA
MessageBoxW
TrackPopupMenu
GetLastInputInfo
SendMessageW
GetCursorPos
DestroyWindow
RegisterClassExA
MsgWaitForMultipleObjects
SetForegroundWindow
GetWindowTextW
SetFocus
GetWindowTextA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 97KB - Virtual size: 107KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 97KB - Virtual size: 107KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 25KB - Virtual size: 25KB