c1c5ce59cdc87933d1349c81eb0602ff31e80fafcac08b8ac426566dcd2c96cb

Sharing

Copy URL Twitter E-mail

General

Target

c1c5ce59cdc87933d1349c81eb0602ff31e80fafcac08b8ac426566dcd2c96cb
Size

4.4MB
MD5

e28adb6c43e7e2b97dd0f6840a01db92
SHA1

4f954d82f37e0db5fd5e68ce0756c5c35d1c9dd3
SHA256

c1c5ce59cdc87933d1349c81eb0602ff31e80fafcac08b8ac426566dcd2c96cb
SHA512

b5f5c3ea2bfdc94aa1db12ee7c3a491327e25cea7de852ee57483a258eacdf0594f04536f4871f946bfd05e1c1ddd694f2c71e0e73d1ed8522ef6eabcfc167f6
SSDEEP

98304:RkAqgoOMVeJ+hfHQt91VO7xNVnTXqBMibsZyW/KOLphvku6XZY0BbqKJdwUHfLuJ:R9KFO+hRN5+U33B

Score

N/A

Malware Config

Signatures

Files

c1c5ce59cdc87933d1349c81eb0602ff31e80fafcac08b8ac426566dcd2c96cb
.exe windows x86

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
HeapAlloc
HeapFree
SetLastError
DisableThreadLibraryCalls
GetProcessId
CreateFileW
LeaveCriticalSection
GetLocalTime
WaitForSingleObjectEx
AddVectoredExceptionHandler
GetModuleHandleExW
Sleep
DeleteCriticalSection
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetLastError
DuplicateHandle
GetCurrentProcess
CreateMutexA
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA

user32

CheckMenuItem
RedrawWindow
CloseDesktop
DispatchMessageA
PostQuitMessage
TranslateMessage
ShowWindow
BringWindowToTop
SetWindowPos
RegisterWindowMessageW
PeekMessageW
PeekMessageA
LoadIconA
AppendMenuW
UpdateWindow
RegisterClassExW
SendMessageA
CreateWindowExA
FindWindowA
GetDlgItem
RegisterWindowMessageA
MessageBoxW
TrackPopupMenu
GetLastInputInfo
SendMessageW
GetCursorPos
DestroyWindow
RegisterClassExA
MsgWaitForMultipleObjects
SetForegroundWindow
GetWindowTextW
SetFocus
GetWindowTextA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.data Size: 97KB - Virtual size: 107KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 97KB - Virtual size: 107KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 25KB - Virtual size: 25KB