bd36165dd6a62cd0aed99b1f1e7464cc8b84d2b0e44463a0e1ba84b075c650fb

Sharing

Copy URL Twitter E-mail

General

Target

bd36165dd6a62cd0aed99b1f1e7464cc8b84d2b0e44463a0e1ba84b075c650fb
Size

138KB
MD5

53877aa16e52e71eada8b02255a002ce
SHA1

84eb4bc6e30a05479a6b9b45bd498167fbb662db
SHA256

bd36165dd6a62cd0aed99b1f1e7464cc8b84d2b0e44463a0e1ba84b075c650fb
SHA512

ab31c0cb1a8ff0df53234377cf80d2924b0fe2cc99aab99799642fe422b099cd07f9968b04e535e1a6f47ce36bf6e2c2a082220f8cab1075b41eb7b496d9dc5b
SSDEEP

3072:77qrQ3HJkGyJkzr5zdaQukjVL7w3zcTKqvVP2ctYdsFxtm:7urQ3pIkPpRukREcGqtuhU

Score

N/A

Malware Config

Signatures

Files

bd36165dd6a62cd0aed99b1f1e7464cc8b84d2b0e44463a0e1ba84b075c650fb
.exe windows x86

ed433c2b79c971691e7261f2497c702f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetNumberFormatW
RtlUnwind
lstrcmpW
OutputDebugStringA
CreateConsoleScreenBuffer
GetCurrentDirectoryA
CreateActCtxW
VirtualAlloc
GetLastError
ExitThread
SetErrorMode
GetACP
GetModuleHandleA
LoadLibraryW
CreateMutexA
GlobalFree
DeleteFileA
HeapFree
VirtualProtect
GetTimeFormatW
CreateProcessA
VirtualFree
FindNextFileW
DeleteVolumeMountPointA
GetProcAddress

msvcrt

wcstol
__CxxFrameHandler
towupper
wcsrchr
_XcptFilter
iswlower
memcpy
_wtoi
printf
_wcsicmp
_wcsnicmp
swscanf
strncpy
toupper
atoi
wcstok
wcscmp
wcsncpy
_wcmdln
__setusermatherr

user32

GetMenuItemCount
wsprintfW
MapWindowPoints
CheckDlgButton
ReleaseCapture
SetScrollPos
ReleaseDC
GetCursorPos
LoadCursorA
ScreenToClient
LoadMenuW
IsWindow
GetParent
RegisterClassA
UnregisterClassW
DestroyWindow
LoadCursorW
DialogBoxParamA
SetCapture
DispatchMessageW
GetProcessWindowStation
LoadImageW
SendMessageA
CopyRect
SendMessageW
BeginPaint
ClientToScreen

gdi32

PatBlt
RestoreDC
SetTextColor
CreateBitmap
TranslateCharsetInfo
CreateCompatibleDC
CreateFontIndirectW
Rectangle
SetBkMode
StretchBlt

opengl32

glTexCoord2d
glColor4i
glStencilMask
GlmfBeginGlsBlock
glFogfv
glColor3ui
wglShareLists
glColor4d
glTexCoord2dv
glColor4f

Exports

Exports

MbmUbbkdurQicmn
TfbufkePmbyvqk
ZwPszbjiePisetg

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ed433c2b79c971691e7261f2497c702f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.crt Size: 512B - Virtual size: 17B

.edata Size: 512B - Virtual size: 124B

.data Size: 56KB - Virtual size: 55KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 512B - Virtual size: 106B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.crt
Size: 512B - Virtual size: 17B

.edata
Size: 512B - Virtual size: 124B

.data
Size: 56KB - Virtual size: 55KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 512B - Virtual size: 106B