6ff3c506bdff21abee73590cdab8dade27dd416f299459bb7ad0741d1997396e

General

Target

6ff3c506bdff21abee73590cdab8dade27dd416f299459bb7ad0741d1997396e
Size

176KB
MD5

0c10e54b0c5076e9f590a32b8c668f26
SHA1

cd28db09033e97d692967efa4190552778b4a85c
SHA256

6ff3c506bdff21abee73590cdab8dade27dd416f299459bb7ad0741d1997396e
SHA512

6f2c24a00a6580ab08276520ac4a96e5e00d7463f6186f9cedc914a23bc9d3fea194cdb3ade379519a673b693bca10f8a66ff17cc4fdf6e6c072bff1297d42e1
SSDEEP

1536:G14o2XIbiBRt0ojDY5k493wvRqeezUqczOXUl2m4Qn6c8YgjGIK5kAhyTXnpe6+I:G14oqY0Tdc5rF+P7bY

Score

N/A

Malware Config

Signatures

Files

6ff3c506bdff21abee73590cdab8dade27dd416f299459bb7ad0741d1997396e
.exe windows x86

4670cb0c1bce10dac9386d3862873e31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
ReleaseDC
SetWindowLongA
DefWindowProcA
PostQuitMessage
InvalidateRect
GetDC
EndPaint
LoadStringA
MessageBoxA
ExitWindowsEx
PostThreadMessageA
LoadImageA
AdjustWindowRectEx
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
BeginPaint

kernel32

LeaveCriticalSection
HeapSize
GetLocaleInfoA
RaiseException
CreateFileA
LoadLibraryA
IsValidCodePage
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualAlloc
SetCommState
FindNextFileA
CopyFileA
IsValidLocale
FatalAppExitW
CancelDeviceWakeupRequest
EnumUILanguagesW
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
TlsAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
SetLastError
WideCharToMultiByte
GetEnvironmentStrings
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
GetFileAttributesA
GetLastError
CloseHandle
CreateThread
GetModuleFileNameA
FreeLibrary
TlsGetValue
GetSystemDirectoryA
GetProcAddress
EnterCriticalSection
GetModuleHandleA
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
DeleteCriticalSection
SetCurrentDirectoryA
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep

Sections

.dec
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4670cb0c1bce10dac9386d3862873e31

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.dec Size: 157KB - Virtual size: 157KB

.rsrc Size: 18KB - Virtual size: 17KB

.dec
Size: 157KB - Virtual size: 157KB

.rsrc
Size: 18KB - Virtual size: 17KB