1522baa8a9bd62d6ab087f8d3129315ac97e2f715bcd4c06db32306de7b65eca

Sharing

Copy URL

Twitter E-mail

General

Target

1522baa8a9bd62d6ab087f8d3129315ac97e2f715bcd4c06db32306de7b65eca
Size

104KB
MD5

17f4394a5540e69a79b3c8cff3e1f225
SHA1

124cad1d2027c0a5c8a7fe2f9f5b6e9f03e712b5
SHA256

1522baa8a9bd62d6ab087f8d3129315ac97e2f715bcd4c06db32306de7b65eca
SHA512

6971bef0f4cbaf9601f485862ec60933fb5af33b8ccebe3308a538a1d1b75b697d9511a0d96bfba1979a43f2f3e3ab9dfcf1d9f75e1df9244c6649a2e1a9f668
SSDEEP

1536:L9UJfvpSmtj9yMV4x2NJ3Skf8G0pQxcmVzDijMWEx6JQR6KKNWzA0n:LmvpSmXyWNn8G0p4cm9DwMWEx0a5

Score

N/A

Malware Config

Signatures

Files

1522baa8a9bd62d6ab087f8d3129315ac97e2f715bcd4c06db32306de7b65eca
.exe windows x86

e39d9f0116de223e05aa60d8477ed9d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
SetStdHandle
WriteConsoleW
IsProcessorFeaturePresent
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
IsValidCodePage
CloseHandle
GetACP
GetCPInfo
Sleep
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LocalFree
LocalAlloc
CreateNamedPipeA
GetProcAddress
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetLastError
CreateDirectoryA
lstrcatA
LocalHandle
LoadLibraryW
ConnectNamedPipe
GetOEMCP
HeapAlloc
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType

user32

MoveWindow
GetWindow
RegisterClassA
ModifyMenuA
DestroyIcon
GetWindowRect
RegisterClassExA
SetMenuItemBitmaps
DeleteMenu
TrackMouseEvent
LoadIconA
GetClientRect
SendMessageA
PtInRect
GetForegroundWindow
GetMenu
CheckMenuRadioItem
CreateAcceleratorTableA
UnregisterClassA
CreateWindowExA
DefWindowProcA
SetWindowPos
GetMenuItemInfoA
EnumWindowStationsW
ShowWindow
CreatePopupMenu
GetClassInfoA
IsWindowVisible
MapWindowPoints
SetMenuItemInfoA
LoadCursorA

gdi32

SetMapMode
GetStockObject
CreateMetaFileA

advapi32

InitializeSecurityDescriptor
CryptAcquireContextA
CryptCreateHash
SetSecurityDescriptorDacl

ole32

CoInitialize
CoInitializeEx
CoInitializeSecurity

shlwapi

AssocCreate

comctl32

PropertySheetA
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetOverlayImage
ImageList_LoadImageA
ImageList_GetIcon

powrprof

GetPwrCapabilities

snmpapi

SnmpUtilVarBindCpy

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e39d9f0116de223e05aa60d8477ed9d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

comctl32

powrprof

snmpapi

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 29KB - Virtual size: 28KB