02247b6acaab422a5e97c09ee795d039b50c0ce3881002802cd35e4b7426ffdf

Sharing

Copy URL

Twitter E-mail

General

Target

02247b6acaab422a5e97c09ee795d039b50c0ce3881002802cd35e4b7426ffdf
Size

4.4MB
MD5

0e08621052fb6adcbb1a423150cc9077
SHA1

5c5e551ef27220c9f2008dc04e2b34b72f3b7fc5
SHA256

02247b6acaab422a5e97c09ee795d039b50c0ce3881002802cd35e4b7426ffdf
SHA512

e1f67193d666c6411106dbb1c0c29d55a933f28ab8ae03839cf6e1f9f102930cb842be433e62dacc6d08e06de3434f9c10d5a38c462c38b4eac973f09db88f07
SSDEEP

98304:KkWVs/OZ1eJtWPLZtSrJY811P9xMvMz/B0+IqdFAD8oBdJnorTiGh3+RPneF1wyS:KjUYuGpKL58F

Score

N/A

Malware Config

Signatures

Files

02247b6acaab422a5e97c09ee795d039b50c0ce3881002802cd35e4b7426ffdf
.exe windows x86

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
HeapFree
SetLastError
DisableThreadLibraryCalls
GetProcessId
CreateFileW
LeaveCriticalSection
GetLocalTime
WaitForSingleObjectEx
AddVectoredExceptionHandler
GetModuleHandleExW
Sleep
DeleteCriticalSection
GetTickCount
InterlockedCompareExchange
ExitProcess
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
CloseHandle
GetTempPathA
LoadLibraryA
GetProcAddress
RemoveDirectoryA
GetLastError
DuplicateHandle
GetCurrentProcess
CreateMutexA
FileTimeToLocalFileTime
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
SetEndOfFile
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyExA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA

user32

CheckMenuItem
RedrawWindow
CloseDesktop
DispatchMessageA
PostQuitMessage
TranslateMessage
ShowWindow
BringWindowToTop
SetWindowPos
RegisterWindowMessageW
PeekMessageW
PeekMessageA
LoadIconA
AppendMenuW
UpdateWindow
RegisterClassExW
SendMessageA
CreateWindowExA
FindWindowA
GetDlgItem
RegisterWindowMessageA
MessageBoxW
TrackPopupMenu
GetLastInputInfo
SendMessageW
GetCursorPos
DestroyWindow
RegisterClassExA
MsgWaitForMultipleObjects
SetForegroundWindow
GetWindowTextW
SetFocus
GetWindowTextA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11affe8e371b5052f342ace1da18914b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 2.8MB - Virtual size: 2.8MB

.data Size: 97KB - Virtual size: 107KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 25KB - Virtual size: 25KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 2.8MB - Virtual size: 2.8MB

.data
Size: 97KB - Virtual size: 107KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 25KB - Virtual size: 25KB