ffd9aaab75594402e924111d5d3de999d509ecd0ae684a438609cb825b0781c3

Sharing

Copy URL

Twitter E-mail

General

Target

ffd9aaab75594402e924111d5d3de999d509ecd0ae684a438609cb825b0781c3
Size

635KB
MD5

0f3d57bbfc63403dc20941918d29dba4
SHA1

c4293167f4daadbaf02493cf2d5583564e7e61c0
SHA256

ffd9aaab75594402e924111d5d3de999d509ecd0ae684a438609cb825b0781c3
SHA512

6b7fcccc5b569a1d1fa1915de14efe5d355252453452b01afc97664c1dd70394fb170f9e4502785ff1c3afcde66ab0b1c8b5917e4608e42177d702ec2c6c5963
SSDEEP

3072:0/UgvS5YtLDWnRs3R6o/Atccm7x2Ix6hmjxwxufni2xylViCVsE+K1wU7oG2tQdl:wLDmuC61cIxLjxwaXx/CSaVddfTB

Score

N/A

Malware Config

Signatures

Files

ffd9aaab75594402e924111d5d3de999d509ecd0ae684a438609cb825b0781c3
.exe windows x86

0a616d059b75cc8efb033dbcf6478149

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetSystemDirectoryW
GetModuleFileNameW
GetSystemDirectoryA
lstrlenW
FlushInstructionCache
GetTempPathW
OpenMutexW
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
IsDebuggerPresent
VirtualProtect
GetCurrentDirectoryA
GetTickCount
GetWindowsDirectoryW
GetVersion
GetSystemTime
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
WideCharToMultiByte
GetModuleHandleW
OutputDebugStringW
GetComputerNameW
GetCurrentProcess
lstrlenA
GetComputerNameA
OutputDebugStringA
ExitProcess
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
VirtualQuery

user32

GetWindowTextLengthW
GetWindowRect
IsIconic
IsZoomed
LoadBitmapA
LoadCursorW
GetForegroundWindow
GetWindowTextA
GetWindowTextW
IsWindowUnicode
GetDesktopWindow
LoadBitmapW
IsWindowVisible
GetProcessDefaultLayout

advapi32

GetCurrentHwProfileW
GetUserNameA
RegOpenKeyExW
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileA
RegFlushKey

Sections

�text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 575KB - Virtual size: 574KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a616d059b75cc8efb033dbcf6478149

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

�text Size: - Virtual size: 80KB

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 575KB - Virtual size: 574KB

�text
Size: - Virtual size: 80KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 575KB - Virtual size: 574KB