94b1d1e5d35956b039f37dd311f104513c652a88f4e91460da3e53165346f7d5

Sharing

Copy URL

Twitter E-mail

General

Target

94b1d1e5d35956b039f37dd311f104513c652a88f4e91460da3e53165346f7d5
Size

5.8MB
MD5

80e4863fa08ea12f805da9d6aa2c6079
SHA1

4930a516c40f9faf233c99b8ccd232f96aba100b
SHA256

94b1d1e5d35956b039f37dd311f104513c652a88f4e91460da3e53165346f7d5
SHA512

31c069116231cab7d4d9d230b33235d8bced7a3e84b210e5535a9d1c51174c1fc216ab7162a13136452032a2564610b0d8b94618f3215ae98279c87c84f479d9
SSDEEP

98304:eP6bpqvkYXNjxxH201CldSPMjQL20soVTIlVTnQMqcg3Q3mhWMXebl3zOBvxCJoj:eP6bp3Ijxx4aM8K0deqMtgg2QGg5doj

Score

N/A

Malware Config

Signatures

Files

94b1d1e5d35956b039f37dd311f104513c652a88f4e91460da3e53165346f7d5
.exe windows x86

b5ad5bfa7cf28b734db4f0c46ed47b4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapFree
LoadLibraryA
ExitThread
LocalFileTimeToFileTime
DuplicateHandle
CreateMutexA
GetCurrentProcess
FileTimeToSystemTime
IsBadWritePtr
GetLastError
HeapAlloc
GetProcAddress
InterlockedCompareExchange
SetLastError
GetModuleHandleA
GetVersionExA
SystemTimeToFileTime
GetModuleHandleExW
Sleep
VirtualProtect
GetProcessHeap
CloseHandle
ResumeThread
WaitForSingleObject
DisableThreadLibraryCalls
ReadFile
GetCurrentProcessId
VirtualFree
GetTickCount
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateFileW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
ExitProcess
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyA
RegEnumKeyExW

user32

LoadIconA
FindWindowW
EnumWindows
GetDesktopWindow
GetCursorPos
DefWindowProcW
FindWindowA
GetSystemMetrics
AppendMenuA
SetWindowPos
PostMessageW
UpdateWindow
GetDlgItem
RegisterClassExW
CreateWindowExW
GetLastInputInfo
BringWindowToTop
CreateWindowExA
RegisterWindowMessageW
SendMessageW
GetWindowRect
GetMessageA
GetWindowTextW
CheckMenuItem
LoadIconW
RegisterWindowMessageA
SetForegroundWindow
GetClientRect
TrackPopupMenu
RegisterClassExA
SendMessageA
AppendMenuW
CreatePopupMenu
PeekMessageA
GetMessageW

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 397KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5ad5bfa7cf28b734db4f0c46ed47b4c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 462KB - Virtual size: 462KB

.rdata Size: 397KB - Virtual size: 397KB

.data Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 462KB - Virtual size: 462KB

.rdata
Size: 397KB - Virtual size: 397KB

.data
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 29KB - Virtual size: 28KB