b6b1c3afc324bab3dd1fc2eb5823bff9adc7e419e3987214b8a663fac5777522

Sharing

Copy URL Twitter E-mail

General

Target

b6b1c3afc324bab3dd1fc2eb5823bff9adc7e419e3987214b8a663fac5777522
Size

5.9MB
MD5

c8aa8ef0b4649f115d3ab0fd4dfab262
SHA1

a8f2e8036d704e273e8a723b18f81966f251cdc0
SHA256

b6b1c3afc324bab3dd1fc2eb5823bff9adc7e419e3987214b8a663fac5777522
SHA512

9472b6ed02f342951ad9bbf74d38e6cc801ab21a4dc0d1a36d060df207130b048bf7ba3d290d3729d9b742f62fc874547adad0465fd05909b9ed3475ef3693ad
SSDEEP

98304:7sXc90dQw3oMwg09IJdruE7M7zAbFFaTmEzy8xrlP8HSNT04qHRUBqi6k30OhCaR:7ss90h3UgcIJ9uE47zAZATLB5UyNURc5

Score

N/A

Malware Config

Signatures

Files

b6b1c3afc324bab3dd1fc2eb5823bff9adc7e419e3987214b8a663fac5777522
.exe windows x86

37c6a705dd2f86c052e92d79eb5f63c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
HeapReAlloc
LeaveCriticalSection
ExitThread
GetLastError
GetTickCount
GetCurrentProcessId
SystemTimeToFileTime
GetProcAddress
CreateMutexA
InitializeCriticalSection
SetLastError
GetModuleHandleA
GetVersionExA
GetModuleHandleExW
Sleep
ExitProcess
VirtualProtect
LoadLibraryA
GetProcessHeap
EnterCriticalSection
DisableThreadLibraryCalls
WaitForSingleObjectEx
GetCurrentThread
IsBadReadPtr
HeapFree
GetCurrentProcess
HeapAlloc
LocalFileTimeToFileTime
VirtualFree
InterlockedCompareExchange
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
CreateFileW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter

advapi32

RegEnumKeyExA
RegCreateKeyA
RegCreateKeyExW
RegQueryInfoKeyA
RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegEnumKeyExW
RegCloseKey
RegEnumValueA
RegQueryValueExA

user32

CheckMenuItem
RedrawWindow
TrackPopupMenu
GetWindowRect
DestroyWindow
CreateWindowExA
FindWindowW
SendMessageA
UpdateWindow
PostQuitMessage
SetWindowPos
FindWindowA
RegisterClassExW
PostMessageW
GetMessageW
EnumWindows
SendMessageW
RegisterWindowMessageW
RegisterClassExA
GetWindowTextW
RegisterWindowMessageA
SetForegroundWindow
CreatePopupMenu
GetDlgItem

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 465KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37c6a705dd2f86c052e92d79eb5f63c0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 455KB - Virtual size: 455KB

.rdata Size: 465KB - Virtual size: 464KB

.data Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 455KB - Virtual size: 455KB

.rdata
Size: 465KB - Virtual size: 464KB

.data
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 29KB - Virtual size: 28KB