5aed8b997baf88d92167aca6187a2c5f3d6e713c4d91ed88cdb46a67869e91c9

Sharing

Copy URL Twitter E-mail

General

Target

5aed8b997baf88d92167aca6187a2c5f3d6e713c4d91ed88cdb46a67869e91c9
Size

5.9MB
MD5

e22f2fddb4a4dd97b2ce0e88dbcfe64e
SHA1

4bb3c10693fbf7587212ab546e6598e8d2149dec
SHA256

5aed8b997baf88d92167aca6187a2c5f3d6e713c4d91ed88cdb46a67869e91c9
SHA512

0af26745b66392dabd7777b9295ffb6ba089566570b3fb6a149af40abd6c4162f1a5e0c58a7e58ddabb1b171f32083bc401c9d22fdd5f8a1ff59e4676eae7032
SSDEEP

98304:hlMlvSGFofKUmXL4UKPU90dO6GTgEbgw75vJTlf5iEIJwZZV:hlGNkMOs6GkEUwV/cEIJwZD

Score

N/A

Malware Config

Signatures

Files

5aed8b997baf88d92167aca6187a2c5f3d6e713c4d91ed88cdb46a67869e91c9
.exe windows x86

bad1dbc123b2d68c939663b3ec5acf89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
GetTickCount
CreateFileA
GetLastError
GetProcAddress
FileTimeToLocalFileTime
InterlockedCompareExchange
CreateMutexA
SetLastError
GetModuleHandleA
GetVersionExA
GetModuleHandleExW
Sleep
VirtualProtect
SystemTimeToFileTime
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
ResumeThread
GetCurrentProcess
LeaveCriticalSection
GetLocalTime
ExitProcess
WaitForSingleObject
EnterCriticalSection
VirtualFree
IsBadWritePtr
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
CreateFileW
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW

advapi32

RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegCreateKeyW
RegOpenKeyW
RegQueryInfoKeyW
RegEnumValueA
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyExW

user32

DispatchMessageA
SendMessageA
TranslateMessage
SetWindowPos
PeekMessageA
CheckMenuItem
DefWindowProcW
FindWindowW
GetWindowTextW
DefWindowProcA
RegisterClassExA
RegisterWindowMessageA
SetForegroundWindow
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageW
RegisterClassExW
RedrawWindow
AppendMenuW
LoadIconW
PeekMessageW
LoadIconA
GetParent
UpdateWindow
CreatePopupMenu
DispatchMessageW
GetLastInputInfo
MessageBoxA

Sections

.text
Size: 473KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bad1dbc123b2d68c939663b3ec5acf89

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 473KB - Virtual size: 472KB

.rdata Size: 481KB - Virtual size: 481KB

.data Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 473KB - Virtual size: 472KB

.rdata
Size: 481KB - Virtual size: 481KB

.data
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 29KB - Virtual size: 28KB