6809df2500ae9a288ac34e9e33d5fb6cf6b84d7ad7b504ab50ee8ea51204037b

Sharing

Copy URL Twitter E-mail

General

Target

6809df2500ae9a288ac34e9e33d5fb6cf6b84d7ad7b504ab50ee8ea51204037b
Size

112KB
MD5

59d02c6260369490bf7152a9424355e4
SHA1

759d7b145cf5b1382b72b3d31c71572a95131910
SHA256

6809df2500ae9a288ac34e9e33d5fb6cf6b84d7ad7b504ab50ee8ea51204037b
SHA512

f69f917ab0a6d5e7c9f252f8d606761865963c31d501e9d8c861078a2e571638e66a6232484bc7117d8d420da7c9f0de7506cc7980135f6af5cac7909f2ddea0
SSDEEP

3072:RCcMfdDSeHMW3sbIdi7bK3aVZ7xksCjcJ85fQ9G:RG5vsu3aVD8u

Score

N/A

Malware Config

Signatures

Files

6809df2500ae9a288ac34e9e33d5fb6cf6b84d7ad7b504ab50ee8ea51204037b
.exe windows x86

d5866256aab1e2220e2e02f4ff0c9d0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetProcAddress
LoadLibraryA
LockResource
WriteProfileStringA
CreateIoCompletionPort
HeapReAlloc
GetBinaryTypeA
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
HeapCreate
SetCommTimeouts
GetCurrentProcess
LoadResource
FreeResource
FindResourceA
GetStringTypeW
FileTimeToDosDateTime
GetACP
GetCPInfo
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapDestroy
EncodePointer
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
IsProcessorFeaturePresent

user32

LoadStringA
SetWindowTextA
AppendMenuA
OffsetRect
GetDC
PtInRect
CopyImage
SetProcessWindowStation
SetMessageQueue

gdi32

GetWindowExtEx
MaskBlt
GetEnhMetaFileDescriptionA
SetTextCharacterExtra
PaintRgn
GetTextCharset
DeleteEnhMetaFile

shell32

SHLoadNonloadedIconOverlayIdentifiers
SHBrowseForFolderA
SHGetInstanceExplorer
SHGetDiskFreeSpaceExA

winmm

auxGetDevCapsA
mixerClose
joyGetNumDevs
mciGetErrorStringA
mmioRead
mmioRenameA
midiStreamRestart

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5866256aab1e2220e2e02f4ff0c9d0d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

winmm

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 59KB - Virtual size: 58KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 59KB - Virtual size: 58KB