97d28b987167717b319ea09113d14fbae3c79db1665cb9fd0750abe056d2b5a3

Sharing

Copy URL Twitter E-mail

General

Target

97d28b987167717b319ea09113d14fbae3c79db1665cb9fd0750abe056d2b5a3
Size

678KB
MD5

04181d55929707416e584eaee4029c89
SHA1

a9bcc63e63b06078bf39306dbdfd673385995dfe
SHA256

97d28b987167717b319ea09113d14fbae3c79db1665cb9fd0750abe056d2b5a3
SHA512

c10daedebd7c74f78f2beaa40b55ad5af184cef98e7c5891b74fd8b669d620bee6f5c900e5939bde39a74a7d7c766fceaf148f4804fb945933b177b6af1f7c82
SSDEEP

12288:xh87JmRmytybmNP7ZAqJY08JhZgaGLW9L0gCwEVeQllo9:M77GzAqJY08JHgHLgUT9/o9

Score

N/A

Malware Config

Signatures

Files

97d28b987167717b319ea09113d14fbae3c79db1665cb9fd0750abe056d2b5a3
.exe windows x86

2681b245352678beeee9dea58e69a8d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileStringA
GetSystemTime
lstrcpyA
CloseHandle
CreateFileW
SetStdHandle
RaiseException
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
RtlUnwind
LoadLibraryW
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
HeapQueryInformation
HeapSize
HeapReAlloc
WriteFile
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
ExitProcess
GetModuleHandleW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
lstrcmpiA
GetLastError
GetProfileIntA
HeapCreate
GlobalAlloc
HeapAlloc
MoveFileExA
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
HeapFree
lstrcmpA
TerminateProcess
GetModuleFileNameW
IsBadReadPtr
HeapValidate
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection

user32

GetDC
EndPaint
ClientToScreen
GetMessageA
EnumDisplayMonitors
GetClassNameA
SetTimer
PostQuitMessage
TrackPopupMenu
KillTimer
GetLastActivePopup
DrawTextA
GetSubMenu
LoadMenuA
LoadIconA
CallNextHookEx
MessageBeep
IsWindowEnabled
wsprintfA
WindowFromPoint
GetClientRect
CreateMenu
IsRectEmpty
SetRectEmpty
BeginPaint
PtInRect
AnyPopup
SendMessageA
TranslateMessage
GetMenu
GetWindowTextA
MessageBoxA
GetWindowLongA
CreateWindowExA
PeekMessageA
ReleaseDC
GetMenuState
DefWindowProcA
ShowWindow
SetMenu
CreatePopupMenu
DrawMenuBar
AppendMenuA
PostMessageA
DispatchMessageA
SetMenuDefaultItem
ReleaseCapture
GetSystemMetrics
InsertMenuA
UpdateWindow
EnableWindow
DestroyMenu
LoadCursorA
CheckMenuItem
RegisterClassA

gdi32

SelectObject
BitBlt
DeleteDC
GetObjectA
CreateCompatibleDC
SetMapMode
GetMapMode

ole32

CreateFileMoniker

psapi

GetModuleBaseNameA

iphlpapi

GetExtendedTcpTable

shlwapi

PathFindExtensionA
PathFindFileNameA
wnsprintfA
StrPBrkA
StrToIntExA

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2681b245352678beeee9dea58e69a8d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

psapi

iphlpapi

shlwapi

Sections

.text Size: 138KB - Virtual size: 137KB

.rdata Size: 419KB - Virtual size: 418KB

.data Size: 55KB - Virtual size: 62KB

.rsrc Size: 52KB - Virtual size: 52KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 419KB - Virtual size: 418KB

.data
Size: 55KB - Virtual size: 62KB

.rsrc
Size: 52KB - Virtual size: 52KB

.reloc
Size: 13KB - Virtual size: 12KB