dd85e88c0a8efff2959658cad385fdfeb13cfb8285bb0a1d161d0efe9a471edc

Sharing

Copy URL

Twitter E-mail

General

Target

dd85e88c0a8efff2959658cad385fdfeb13cfb8285bb0a1d161d0efe9a471edc
Size

162KB
MD5

65efc0bd76e37ae96350225c058e4732
SHA1

5606d42a919ac2ab86a42bc0288d5fb3567aa294
SHA256

dd85e88c0a8efff2959658cad385fdfeb13cfb8285bb0a1d161d0efe9a471edc
SHA512

492b4f2739e80d2732c6112ad612feec982ebfd0c10f31deaa41fca52b71ac853935abe58a301beb10616377a3a38f8aa587ba339ef02b849d3fdb6be1af55cd
SSDEEP

3072:98vcOHxvmp+Kl2l0D2B3rOWx1IcYfB1sPv:qUOHBa+KlJ6NrOWx1up1sPv

Score

N/A

Malware Config

Signatures

Files

dd85e88c0a8efff2959658cad385fdfeb13cfb8285bb0a1d161d0efe9a471edc
.exe windows x86

a223b7f28a01ee598694711375a4b11f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtClose
RtlUnwind

mpr

WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW

kernel32

GetProcessTimes
GetCurrentThreadId
GetCurrentProcessId
GetThreadTimes
LoadLibraryA
HeapReAlloc
HeapAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
InterlockedCompareExchange
HeapDestroy
HeapCreate
HeapSize
MultiByteToWideChar
GetDriveTypeW
GetLogicalDriveStringsW
GetLongPathNameW
GetComputerNameExW
ExpandEnvironmentStringsW
GetLastError
FindClose
FindNextFileW
GetModuleHandleW
GetProcAddress
GetNativeSystemInfo
GetSystemTimeAsFileTime
GetVersionExW
CloseHandle
TerminateProcess
GetModuleFileNameW
GetProcessHeap
CreateThread
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
WriteFile
ExitProcess
LCMapStringW
WideCharToMultiByte
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
GetCurrentThread
GetTickCount
GetCurrentProcess
GetStringTypeW
LoadLibraryW
IsProcessorFeaturePresent
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileW
InitializeCriticalSectionAndSpinCount
GetStdHandle
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
SetHandleCount

user32

CreateWindowExW
MessageBoxW
GetSystemMetrics
SendMessageW
UpdateWindow
EnableWindow
DefWindowProcW
ShowWindow
ExitWindowsEx
GetFocus
GetCapture
GetForegroundWindow
GetDesktopWindow
GetActiveWindow
GetClipboardOwner
GetShellWindow
GetOpenClipboardWindow
RegisterClassExW
TranslateMessage
GetClientRect
PostQuitMessage
GetMessageW
DispatchMessageW
GetKBCodePage

gdi32

CreateFontW
GetStockObject
SetTextColor

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges

shell32

SHGetFolderPathW

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a223b7f28a01ee598694711375a4b11f

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

mpr

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 11KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 708B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 11KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 708B

.reloc
Size: 7KB - Virtual size: 7KB