04820896e5bf02692658f8b93a568b49cb858bc6a676f72e8539e346584d00e3

Sharing

Copy URL Twitter E-mail

General

Target

04820896e5bf02692658f8b93a568b49cb858bc6a676f72e8539e346584d00e3
Size

1.4MB
MD5

3cec0504d4f763482b7e1a8c18667f29
SHA1

3402774f8c63d6c62fa6e8129fb99b663522df86
SHA256

04820896e5bf02692658f8b93a568b49cb858bc6a676f72e8539e346584d00e3
SHA512

d927d4b49a35bf87113f48e14367148a652516b33c90865c698ea27cb03424b932195b411a84ef145deb0af2bf7cd41dfc3a9d6cdb42cda9d8a4dc92ce7d1b74
SSDEEP

12288:mh470Jsczgw/AOjXMnji1Qm268LmsT9jP5CZpY2uUsAykwW4VAqPTYi/mKluINCS:L7e1Dt25mepEY3Ud546qsi1ZN0nmOhmp

Score

N/A

Malware Config

Signatures

Files

04820896e5bf02692658f8b93a568b49cb858bc6a676f72e8539e346584d00e3
.exe windows x86

62bc179d77b6baf41e7a19b842544f30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

GetModuleHandleW
GetTickCount
GetProcessHeap
GetWindowsDirectoryA
GetConsoleCP
GetSystemDirectoryW
GetSystemDirectoryA
IsDebuggerPresent
GetCurrentDirectoryA
GetDiskFreeSpaceExW
GetVersion
GetTempPathA
GetSystemTime
OutputDebugStringW
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetComputerNameW
GetCPInfo
lstrlenA
GetComputerNameA
GetCommandLineW
HeapAlloc
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

GetWindowRect
IsIconic
LoadBitmapA
GetForegroundWindow
GetWindowTextA
GetWindowLongW
IsWindowUnicode
GetDesktopWindow
GetCursorPos
LoadBitmapW
GetCursor
IsWindowVisible

advapi32

RegOpenKeyExW
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileA
GetUserNameA

Sections

h�a
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

� �>
Size: 256B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�ۥ�S
Size: 512B - Virtual size: 693B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62bc179d77b6baf41e7a19b842544f30

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

h�a Size: 62KB - Virtual size: 61KB

� �> Size: 256B - Virtual size: 204B

�ۥ�S Size: 512B - Virtual size: 693B

.rsrc Size: 1.4MB - Virtual size: 2.2MB

h�a
Size: 62KB - Virtual size: 61KB

� �>
Size: 256B - Virtual size: 204B

�ۥ�S
Size: 512B - Virtual size: 693B

.rsrc
Size: 1.4MB - Virtual size: 2.2MB