fa9d202ed9a3be4700b2f5fe2e00c5ad540f54b80dd57879806ea37dc61c6012

Sharing

Copy URL Twitter E-mail

General

Target

fa9d202ed9a3be4700b2f5fe2e00c5ad540f54b80dd57879806ea37dc61c6012
Size

247KB
MD5

0fd7ae3f9de4478238eafeb474501545
SHA1

a0aad11443c379fdb5a3e29702410cedb6efc0bd
SHA256

fa9d202ed9a3be4700b2f5fe2e00c5ad540f54b80dd57879806ea37dc61c6012
SHA512

bce0e020beb690e0cfcb3e06dca6f0c2a22f9479decb2bb01690917ab4ef456a6a36197473529ea15cf1b9bcd7fb1142abff1f536c35e3282d416ee6194fa849
SSDEEP

3072:fwUMFvEwohOeq/grOWdyfVkJt4H8bnIxUWEMP6bX9YrFv+gIzMcL55fF:oz6BqWdyto+cbIxUW+bCIzMcdVF

Score

N/A

Malware Config

Signatures

Files

fa9d202ed9a3be4700b2f5fe2e00c5ad540f54b80dd57879806ea37dc61c6012
.exe windows x86

d6eb07923c9b112f113dd9064a73ee18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuState
GetWindowPlacement
AppendMenuA
PeekMessageW
SetWindowLongA
InvertRect
wsprintfA
ShowWindow
GetDialogBaseUnits
DialogBoxParamW
CallWindowProcW
wvsprintfW
TrackMouseEvent
PaintDesktop
KillTimer
DrawAnimatedRects
GetCapture
CopyIcon
IsGUIThread
IsWindowVisible
GetActiveWindow
ChildWindowFromPointEx
GetSysColor
GetWindowTextLengthW
IsCharAlphaNumericA
GetWindowTextLengthA
NotifyWinEvent
GetQueueStatus
UpdateWindow
GetWindowRgn
GetSubMenu
DeferWindowPos

ole32

CoCreateInstance

advapi32

RegDeleteValueW
RegCreateKeyA
RegDeleteKeyW

gdi32

CombineRgn

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualAlloc
EnumResourceNamesW
GetFileInformationByHandle
SetLastError
GetVersion
FreeResource
LocalShrink
ClearCommError
FlushInstructionCache
SetMailslotInfo
GlobalUnfix
HeapAlloc
GetProcessHeap
IsProcessInJob
LockResource
GetPriorityClass
GetNamedPipeInfo
GetProcessPriorityBoost
GetTempPathW
ExpandEnvironmentStringsA
lstrlenA
SetPriorityClass
GetModuleFileNameA
InitializeCriticalSection
GetLogicalDriveStringsW
DebugSetProcessKillOnExit
GetEnvironmentVariableW
GlobalFlags
FindClose
GetExitCodeThread
GetSystemDefaultLangID
IsBadCodePtr
SuspendThread
GetFileType
WideCharToMultiByte
TlsAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6eb07923c9b112f113dd9064a73ee18

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

gdi32

kernel32

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 27KB - Virtual size: 27KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 27KB - Virtual size: 27KB