99ac31b4ef6d211eaf12d90975d0b75a0149c6c14acdb14abfda71ccdde6076c

Sharing

Copy URL

Twitter E-mail

General

Target

99ac31b4ef6d211eaf12d90975d0b75a0149c6c14acdb14abfda71ccdde6076c
Size

184KB
MD5

ee93ea77139fdc0881d181de424be3db
SHA1

ea0efe310ee3794a4d5f6e074e2f1f56e50180bc
SHA256

99ac31b4ef6d211eaf12d90975d0b75a0149c6c14acdb14abfda71ccdde6076c
SHA512

3e7013317814860cd439c11c7502d136464f6f16830960fb106d8546f3de112594461f741664eb3ed84a6610abd373863c61b15392e8ba17ea03f5dcd7b5fba2
SSDEEP

3072:bqPO7C6IiSX2hI/rmE8PjguXRY7ArrCEmguU1DNlFJa39g:bSOu6i2hI/rXGg4RLmED5F

Score

N/A

Malware Config

Signatures

Files

99ac31b4ef6d211eaf12d90975d0b75a0149c6c14acdb14abfda71ccdde6076c
.exe windows x86

a87240b873c1a5b2b17c559a4ce533e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GlobalAddAtomW
TryEnterCriticalSection
HeapAlloc
EnumResourceNamesW
GlobalFix
HeapCompact
TlsSetValue
FindResourceExA
MoveFileA
CompareFileTime
WriteProfileSectionW
InitializeSListHead
UpdateResourceA
ClearCommBreak
GetDevicePowerState
Sleep
EnumResourceTypesW
SetConsoleTitleA
IsSystemResumeAutomatic
GetShortPathNameA
GetPrivateProfileStringW
IsBadStringPtrA
CreateMailslotW
LoadLibraryA
GetProcAddress
PeekConsoleInputA
GetSystemWindowsDirectoryW
OpenWaitableTimerA
CreateFileW
GetLastError
SetFilePointer
WriteFile
CloseHandle
SetConsoleActiveScreenBuffer
SetCurrentDirectoryW
EnumSystemCodePagesA
GetCalendarInfoA
GetTickCount
FindResourceW

user32

DefDlgProcA
DrawAnimatedRects
ArrangeIconicWindows
SetWindowRgn
HideCaret
ScrollWindowEx
ShowWindowAsync
RegisterClipboardFormatA
AnimateWindow
FillRect
GetClassInfoExW
IsDialogMessageW
CharLowerBuffA
LoadStringW
GetKBCodePage
DlgDirSelectComboBoxExA
ClipCursor
IsWindowUnicode
SendMessageTimeoutA
PostMessageA
OemToCharA
GetClipboardFormatNameA
UnregisterDeviceNotification
ExitWindowsEx
SetPropA
SystemParametersInfoA
UnregisterClassA
GetDlgItemInt
IsWindowEnabled
LoadCursorFromFileA

gdi32

CloseFigure
SetBitmapBits
GetPixel
PlayMetaFileRecord
GetMiterLimit
GetEnhMetaFileHeader
SetICMProfileA
SetColorSpace
SetICMMode
SetTextColor
SetDeviceGammaRamp
SelectPalette
GetWindowExtEx
CreateEnhMetaFileA
DeleteDC
LPtoDP
GetBitmapBits

advapi32

IsValidSid
SetSecurityDescriptorSacl
RegDisablePredefinedCache
FileEncryptionStatusW
LookupPrivilegeNameW
OpenBackupEventLogW
LogonUserW
RegEnumKeyW
StartServiceCtrlDispatcherW
InitiateSystemShutdownExW
SetKernelObjectSecurity
AreAllAccessesGranted
QueryServiceConfigA
LookupPrivilegeNameA
RegOpenUserClassesRoot
ImpersonateLoggedOnUser
ReadEventLogW
RegEnumKeyExA

Exports

Exports

GnrkBltvkx
GnrkBmoaar
GnrkCyrpw
GnrkEkp
GnrkEnjzs
GnrkFa
GnrkFsx
GnrkGm
GnrkGt
GnrkHhcpo
GnrkHjtl
GnrkIiip
GnrkJird
GnrkJstv
GnrkKhlhca
GnrkKhqbbu
GnrkLmkamk
GnrkLoc
GnrkNlqh
GnrkNofovl
GnrkNr
GnrkNsdwzc
GnrkOda
GnrkOhqbhe
GnrkOi
GnrkOksgc
GnrkOxft
GnrkPp
GnrkQm
GnrkQr
GnrkQulon
GnrkRrdcfn
GnrkSbq
GnrkSf
GnrkStso
GnrkTcfv
GnrkTch
GnrkTjxdo
GnrkTrg
GnrkUsmc
GnrkVnndq
GnrkWapq
GnrkWsnq
GnrkWtlrh
GnrkWyey
GnrkXalbb
GnrkXzwnp
GnrkZewk
GnrkZtdij

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a87240b873c1a5b2b17c559a4ce533e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 2KB - Virtual size: 433KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 2KB - Virtual size: 433KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 10KB - Virtual size: 9KB