ad32fdd24e666338e54747c6ccfd24e1915d1351a95330a3b8883ad51faf0fca

Sharing

Copy URL

Twitter E-mail

General

Target

ad32fdd24e666338e54747c6ccfd24e1915d1351a95330a3b8883ad51faf0fca
Size

5.8MB
MD5

a528ae23500021043e1acdb28bfb39c3
SHA1

2a464fadd953271d7b529505ce90c8a79b218593
SHA256

ad32fdd24e666338e54747c6ccfd24e1915d1351a95330a3b8883ad51faf0fca
SHA512

68dd3722ddfa639e9e4a993a733b849beb541ff9fbe7ede31e388eb74a82c3ffc888efd2cdbbb93bef62bd0959f1ed16a450c74a21f1f297deda325a9fcef700
SSDEEP

98304:i0WcSgjmWkS0s0WBnOgB+h991kejIoaAk6uS4id7fxOj/9kvWA2Bt77euQ:idZ2706BnOgBGj9PR4qjG/9MMbQ

Score

N/A

Malware Config

Signatures

Files

ad32fdd24e666338e54747c6ccfd24e1915d1351a95330a3b8883ad51faf0fca
.exe windows x86

10a7ef5db007cdd981c4879317b28ce2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
LeaveCriticalSection
GetLocalTime
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
CreateMutexA
CloseHandle
GetCurrentProcess
SystemTimeToFileTime
GetLastError
GetTickCount
InitializeCriticalSection
Sleep
GetProcAddress
InterlockedCompareExchange
LocalFileTimeToFileTime
GetCurrentThread
WaitForSingleObjectEx
FileTimeToLocalFileTime
SetLastError
GetModuleHandleA
GetVersionExA
CreateFileA
GetModuleHandleExW
VirtualProtect
ExitThread
ResumeThread
VirtualFree
ExitProcess
VirtualAlloc
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
RtlUnwind
GetCommandLineA
InterlockedDecrement
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
RaiseException
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetCurrentThreadId
WideCharToMultiByte
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime

advapi32

RegQueryValueExW
RegOpenKeyA
RegQueryValueW

user32

BringWindowToTop
CheckMenuItem
GetDlgItem
SetFocus
LoadIconA
FindWindowA
MessageBoxA
UpdateWindow
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageA
SendMessageA
MsgWaitForMultipleObjects
DispatchMessageW
SendMessageW
SetForegroundWindow
RegisterClassExA
ShowWindow
LoadIconW
EnumWindows
GetMessageW
RedrawWindow
DestroyWindow
GetWindowRect
GetMessageA
SetWindowPos
GetWindowTextW
PostMessageA
RegisterWindowMessageW
CloseDesktop

Sections

.text
Size: 477KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10a7ef5db007cdd981c4879317b28ce2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

Sections

.text Size: 477KB - Virtual size: 476KB

.rdata Size: 398KB - Virtual size: 398KB

.data Size: 5.0MB - Virtual size: 5.0MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 477KB - Virtual size: 476KB

.rdata
Size: 398KB - Virtual size: 398KB

.data
Size: 5.0MB - Virtual size: 5.0MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 29KB - Virtual size: 28KB