5d675ea2f980ec0194e8e962739de59737008faadb819d5f4d5cee778de672a7

Sharing

Copy URL Twitter E-mail

General

Target

5d675ea2f980ec0194e8e962739de59737008faadb819d5f4d5cee778de672a7
Size

308KB
MD5

8efca1116315b57c06e0c330076e2acd
SHA1

f37bc4309a59898a7277a82c9ede7ce0401a90d4
SHA256

5d675ea2f980ec0194e8e962739de59737008faadb819d5f4d5cee778de672a7
SHA512

d79d48f90a30dffb6b23bf38ea3a93874d1dd7c7c2158877828500c1c7b7ffb742234e15f39c6a9b56cd0cf0cdc2f11b52653991c7f65b670f7d1169332b9570
SSDEEP

6144:YbgbWR2zNjGVgrFDJPhozPz7hA1lPnmDFXcrXqgVdUZl06gBiz:Y0bWAjrVJhozPz7hA1lPnSmzqgiz

Score

N/A

Malware Config

Signatures

Files

5d675ea2f980ec0194e8e962739de59737008faadb819d5f4d5cee778de672a7
.exe windows x86

c5af906f4de98e566352ed8b9ff7a53b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

GetStringTypeW
LCMapStringW
SetFilePointer
MultiByteToWideChar
WriteConsoleW
CloseHandle
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
GetConsoleCP
HeapReAlloc
LoadLibraryW
ResetEvent
GetLastError
GetStdHandle
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
HeapAlloc
GetCurrentThreadId
SetLastError
InterlockedIncrement
GetConsoleMode
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetModuleFileNameW
EncodePointer
SetHandleCount
DeleteCriticalSection
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
CreateFileW

user32

CallWindowProcA
SetMenuItemInfoA
DefMDIChildProcA
DestroyWindow
GetSubMenu
OpenInputDesktop
SendMessageA
GetIconInfo
GetMenu
MessageBoxA
GetCursorPos

gdi32

GetObjectA
SelectObject

comdlg32

CommDlgExtendedError
PrintDlgA

comctl32

ord16

imm32

ImmGetDefaultIMEWnd

dbghelp

SymSetSearchPath

winhttp

WinHttpOpen

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 209KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.utext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5af906f4de98e566352ed8b9ff7a53b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

imm32

dbghelp

winhttp

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 209KB - Virtual size: 208KB

.data Size: 12KB - Virtual size: 20KB

.utext Size: 5KB - Virtual size: 4KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 29KB - Virtual size: 28KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 209KB - Virtual size: 208KB

.data
Size: 12KB - Virtual size: 20KB

.utext
Size: 5KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 6KB - Virtual size: 6KB