3a69ac82689dfb01a11ad06bfc627497472626e26c6e8230ef3c7833ee7c552d

Sharing

Copy URL Twitter E-mail

General

Target

3a69ac82689dfb01a11ad06bfc627497472626e26c6e8230ef3c7833ee7c552d
Size

168KB
MD5

b8bf19b2be0fa831ccdb8f3d4b0ba74c
SHA1

b412b7ee62dbfb7ab12efd72beeb0bf07d0f5a6c
SHA256

3a69ac82689dfb01a11ad06bfc627497472626e26c6e8230ef3c7833ee7c552d
SHA512

d182bf3b8ef3f6130433c1e4c637093ceb8285f997e185094339627950f96371dd63abbea06f1f6105bd4d08c08652e2d9628a32f05c809a5c6da04623daddfc
SSDEEP

3072:jU9DvnzF92yOWa6QAVB6wuiivYuUQXLzPR:jUdnzfxFQAVUwui2UQh

Score

N/A

Malware Config

Signatures

Files

3a69ac82689dfb01a11ad06bfc627497472626e26c6e8230ef3c7833ee7c552d
.exe windows x86

5e44b3a5c378aa018783707822f8ac8a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetDC
GetSystemMetrics
CharNextA
TranslateMessage
GetDesktopWindow

kernel32

lstrlenW
VirtualAlloc
GetWindowsDirectoryA
lstrcmpA
VirtualFree
RemoveDirectoryA
GetModuleHandleA
lstrcmpiW
GetCommandLineW
MulDiv
IsDebuggerPresent
GetOEMCP
GetUserDefaultLangID
DeleteFileA
DeleteFileW
GetACP
GetThreadLocale
GlobalFindAtomA
SetCurrentDirectoryA
lstrcmpiA
CopyFileA
GetCurrentThread
GetModuleHandleW
GetCurrentThreadId
GetConsoleOutputCP
QueryPerformanceCounter
GlobalFindAtomW
GetCurrentProcess
GetProcessHeap
GetTickCount
GetStartupInfoA
lstrlenA
GetCommandLineA
GetCurrentProcessId
GetVersion

gdi32

DeleteObject
GetPixel
SelectObject
CreateFontIndirectA
SetMapMode
GetClipBox
GetTextMetricsA
SetTextAlign
CreatePalette
SaveDC
GetObjectA
DeleteDC
SetStretchBltMode
CreateSolidBrush
PatBlt
SetTextColor
RestoreDC
LineTo
CreatePen
RectVisible
CreateCompatibleDC
GetStockObject
GetDeviceCaps
SelectPalette

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Hkelyqnx
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Hxdyl. W
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e44b3a5c378aa018783707822f8ac8a

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 10KB - Virtual size: 10KB

Hkelyqnx Size: 512B - Virtual size: 4KB

.rdata Size: 26KB - Virtual size: 25KB

Hxdyl. W Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 100KB

.rsrc Size: 29KB - Virtual size: 28KB

.text
Size: 10KB - Virtual size: 10KB

Hkelyqnx
Size: 512B - Virtual size: 4KB

.rdata
Size: 26KB - Virtual size: 25KB

Hxdyl. W
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 100KB

.rsrc
Size: 29KB - Virtual size: 28KB