e4e3320c95503384079c9349a7e60c31007cb5bfb683a3d8e37064df95e3b72f

Sharing

Copy URL

Twitter E-mail

General

Target

e4e3320c95503384079c9349a7e60c31007cb5bfb683a3d8e37064df95e3b72f
Size

5.9MB
MD5

f98cc1ed7d0f00c066b656c7983a5dc8
SHA1

a068d5a7d098688db0e5305dcddc1c29eb0d258d
SHA256

e4e3320c95503384079c9349a7e60c31007cb5bfb683a3d8e37064df95e3b72f
SHA512

9c63448161b0c1a49944f14015fc1bccf292799660a58090047546eecc66143605d9eb93fb943496a87259f05f55c800caf6653e54c668ee31f416d62f50658d
SSDEEP

98304:zgXN9HVy6ImMQuX9uNw082xdBW3j6YseoBg+cDiD9e7o5PWx/EtsbVfewPpNw7H8:zgXN9q8+0bBWzVB+Gh7o0x/Ets5Wy/Q8

Score

N/A

Malware Config

Signatures

Files

e4e3320c95503384079c9349a7e60c31007cb5bfb683a3d8e37064df95e3b72f
.exe windows x86

b520f7b649dc641e3565232e039529e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateMutexA
DeleteCriticalSection
ExitThread
GetTickCount
GetProcAddress
InterlockedCompareExchange
LoadLibraryA
GetModuleHandleA
GetVersionExA
GetModuleHandleExW
WaitForSingleObject
VirtualProtect
HeapFree
HeapAlloc
GetProcessHeap
Sleep
DuplicateHandle
CreateFileA
DisableThreadLibraryCalls
GetCurrentProcess
CloseHandle
GetLastError
VirtualFree
SetLastError
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
CreateFileW
TlsAlloc
TerminateProcess
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
ExitProcess
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter

advapi32

RegCreateKeyA
RegQueryInfoKeyA
RegOpenKeyExW
RegCloseKey
RegEnumKeyA
RegQueryValueExW
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegCreateKeyW

user32

MessageBoxW
RegisterWindowMessageA
GetWindowRect
GetDlgItem
EnumWindows
LoadIconA
PostMessageA
RegisterClassExA
RegisterWindowMessageW
SendMessageA
UpdateWindow
TranslateMessage
TrackPopupMenu
GetDesktopWindow
GetCursorPos
DefWindowProcA
FindWindowW
GetLastInputInfo
SetWindowPos
BringWindowToTop
PostMessageW
AppendMenuW
GetSystemMetrics
ShowWindow
MessageBoxA
CloseDesktop
SendMessageW
SetForegroundWindow
RegisterClassExW
GetMessageA

Sections

.text
Size: 434KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b520f7b649dc641e3565232e039529e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 434KB - Virtual size: 433KB

.rdata Size: 329KB - Virtual size: 329KB

.data Size: 5.1MB - Virtual size: 5.1MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 434KB - Virtual size: 433KB

.rdata
Size: 329KB - Virtual size: 329KB

.data
Size: 5.1MB - Virtual size: 5.1MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 29KB - Virtual size: 28KB