859a1f8746ce96f4f7a19667a20101f5a5b130f5e28b60f4a39fa87105270576

Sharing

Copy URL Twitter E-mail

General

Target

859a1f8746ce96f4f7a19667a20101f5a5b130f5e28b60f4a39fa87105270576
Size

380KB
MD5

63f854d00e2b61f5fcaf42f5d0048272
SHA1

3725bfbe7e871143124060c398083a71087662b1
SHA256

859a1f8746ce96f4f7a19667a20101f5a5b130f5e28b60f4a39fa87105270576
SHA512

dec6d464dbca8c3d6b0f2f12f9dc35b5471bc01baefb5a5254a00ef2eeff26da0cf41b0cd7275c62b9dee892026c86343730cb02addb58aae46952bbfd0a4dec
SSDEEP

6144:s0yMLH4AOQcUpL3Wrr39RVI81jNQpL3tYSdzZLqcmcqUwUySPa1ZSqo2Hxfdlmm5:s0yMLH4icd9RVI8fGSmxq19Uw6Pp2RfD

Score

N/A

Malware Config

Signatures

Files

859a1f8746ce96f4f7a19667a20101f5a5b130f5e28b60f4a39fa87105270576
.exe windows x86

52f47d6ba4450aeb7a1579d919a9f5cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_SYSTEM
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

SetStdHandle
CreateFileW
GetConsoleMode
CloseHandle
GetLastError
GetStdHandle
HeapCreate
HeapAlloc
GetSystemDirectoryW
AllocConsole
GetNativeSystemInfo
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapValidate
IsBadReadPtr
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleW
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
RaiseException
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
FlushFileBuffers

user32

IsDlgButtonChecked
GetWindow
ReleaseDC
EnumDisplayMonitors
IsMenu
IsWindowEnabled
GetDC

gdi32

CreateFontA
GetDIBits
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CombineTransform
GetObjectA
CreateDIBSection

comdlg32

ChooseFontA
ChooseColorA

shell32

SHParseDisplayName

ole32

OleInitialize
StgCreateDocfile
CoInitialize

setupapi

SetupDiGetClassDevsA

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52f47d6ba4450aeb7a1579d919a9f5cb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

setupapi

Sections

.text Size: 221KB - Virtual size: 220KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 46KB - Virtual size: 53KB

.rsrc Size: 66KB - Virtual size: 66KB

.text
Size: 221KB - Virtual size: 220KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 46KB - Virtual size: 53KB

.rsrc
Size: 66KB - Virtual size: 66KB