5fe1c0ad396d5127baa6e75e7e9a2a8df0e7e223629560a28b6cb2e8cd755eb1

Sharing

Copy URL Twitter E-mail

General

Target

5fe1c0ad396d5127baa6e75e7e9a2a8df0e7e223629560a28b6cb2e8cd755eb1
Size

6.2MB
MD5

65deb26b61b031a293dd063f864e5e21
SHA1

2302ff875009293ead6e28ae1230618e9e0b0083
SHA256

5fe1c0ad396d5127baa6e75e7e9a2a8df0e7e223629560a28b6cb2e8cd755eb1
SHA512

501d8593fc781035819dc867721776fd36c3086cf9f334af84be9218743e3f511f171bde9977b79bee650aed171e1b9b57c0b2960b8453ae62408e21b8e237f2
SSDEEP

196608:MwxuomVM4Nc/Zt/KiLfl9DHt73417ktZq:MwtIMYc/DSU/1o17ktZ

Score

N/A

Malware Config

Signatures

Files

5fe1c0ad396d5127baa6e75e7e9a2a8df0e7e223629560a28b6cb2e8cd755eb1
.exe windows x86

7831025e11770da9269c4383fbf0c877

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
HeapFree
LoadLibraryA
ExitProcess
CreateMutexA
CloseHandle
GetCurrentProcess
GetLastError
GetTickCount
GetProcAddress
InterlockedCompareExchange
SetLastError
GetProcessHeap
GetVersionExA
FileTimeToLocalFileTime
LeaveCriticalSection
GetModuleHandleExW
IsBadWritePtr
IsBadReadPtr
VirtualProtect
EnterCriticalSection
GetCurrentThread
WaitForSingleObjectEx
HeapReAlloc
DuplicateHandle
GetLocalTime
ReadFile
Sleep
InitializeCriticalSection
VirtualFree
GetModuleHandleA
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
GetModuleHandleW
CreateFileW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW

advapi32

RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueW
RegCloseKey
RegCreateKeyA
RegOpenKeyW
RegQueryValueExA

user32

FindWindowW
TrackPopupMenu
GetParent
RegisterWindowMessageA
RedrawWindow
GetMessageA
ShowWindow
SendMessageW
SendMessageA
PostQuitMessage
MsgWaitForMultipleObjects
RegisterClassExW
SetFocus
RegisterClassExA
RegisterWindowMessageW
GetWindowTextW
SetForegroundWindow
UpdateWindow
GetWindowTextA
SetWindowPos
GetSystemMetrics
DispatchMessageW
CreateWindowExW
GetLastInputInfo
PostMessageW
LoadIconW
PeekMessageW

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7831025e11770da9269c4383fbf0c877

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 504KB - Virtual size: 503KB

.rdata Size: 599KB - Virtual size: 599KB

.data Size: 5.1MB - Virtual size: 5.1MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 504KB - Virtual size: 503KB

.rdata
Size: 599KB - Virtual size: 599KB

.data
Size: 5.1MB - Virtual size: 5.1MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 30KB - Virtual size: 29KB