dbb714ebcc99a7dd726baf2308227766ada87c5124e9cd87ab9a49765e67213e

Sharing

Copy URL

Twitter E-mail

General

Target

dbb714ebcc99a7dd726baf2308227766ada87c5124e9cd87ab9a49765e67213e
Size

438KB
MD5

bd146c53e189dee8c636aaf896a899a3
SHA1

bcdf3a2037d01843f712bf689e868a5ed4ebf1e7
SHA256

dbb714ebcc99a7dd726baf2308227766ada87c5124e9cd87ab9a49765e67213e
SHA512

2e73e03536580c4311836fc25bbb1797822f88ccf14803520df68ac69ab00d943b1e09d3329299da2d6d7ad8fa1acabcf3ca106aea24ea2ca5895d9b73593cc8
SSDEEP

6144:AL86dm49PN7IbBZDDraZgV7C3J1qVghOUdObhE5Ip2LZrnyGKdxW:b6dnz7sJDr8gV0gVgIbhEX0PxW

Score

N/A

Malware Config

Signatures

Files

dbb714ebcc99a7dd726baf2308227766ada87c5124e9cd87ab9a49765e67213e
.exe windows x86

48faff3d7cf7766a7cc7a9816d88b6c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetSystemDefaultLangID
GetThreadPriority
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
GetCurrentThread
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
MultiByteToWideChar
SetThreadPriority
SizeofResource
WideCharToMultiByte
lstrcmpiA
lstrcpyA
lstrlenA
FreeResource
FindResourceA
EnumTimeFormatsA
EnumDateFormatsA
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateProcessA
CompareStringW
CompareStringA
GetProcAddress
Sleep
HeapFree
GetModuleHandleA

user32

CloseDesktop
CreateWindowExA
DefWindowProcA
DestroyMenu
DestroyWindow
DispatchMessageA
EnableMenuItem
EnableWindow
EndPaint
EqualRect
ClientToScreen
GetClientRect
GetCursorPos
GetDC
GetDlgItemTextA
GetForegroundWindow
GetMenuState
GetMessageA
GetSubMenu
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
IsCharAlphaA
IsCharUpperA
IsCharUpperW
IsDialogMessageA
IsWindow
IsWindowVisible
KillTimer
LoadCursorA
LoadIconA
LoadMenuA
LoadStringA
MessageBeep
MessageBoxA
MoveWindow
OpenDesktopA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseDC
RemoveMenu
ScreenToClient
SendMessageA
SetFocus
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenu
TranslateMessage
VkKeyScanA
wsprintfA
CheckMenuItem
CharUpperW
CharUpperA
CharLowerW
CharLowerA
CallWindowProcA
BeginPaint
SetWindowLongW
GetKeyState
LoadIconW
GetSysColor
LoadCursorW
GetKeyboardType
GetClassNameA

gdi32

BeginPath
DeleteObject
EndPath
SelectObject
GetStockObject
GetTextMetricsA
Polyline
DeleteDC
FillPath
GetEnhMetaFileA

advapi32

RegQueryValueExA
RegOpenKeyExA

ole32

CoInitialize

msvcrt

_onexit
wcscpy
_EH_prolog
_XcptFilter
__CxxFrameHandler
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_controlfp
_except_handler3
_initterm
_stricmp
atoi
exit
free
isspace
malloc
memcpy
memmove
memset
qsort
realloc
strcpy
strlen

Sections

.text
Size: 380KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48faff3d7cf7766a7cc7a9816d88b6c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

msvcrt

Sections

.text Size: 380KB - Virtual size: 379KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 724B

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 380KB - Virtual size: 379KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 724B

.rsrc
Size: 4KB - Virtual size: 4KB