544a504abde8e7efd27b8ac2add375266dc9d3003e7e44b7983f042f4724574a

Sharing

Copy URL Twitter E-mail

General

Target

544a504abde8e7efd27b8ac2add375266dc9d3003e7e44b7983f042f4724574a
Size

110KB
MD5

6e979b90d640a90e12f57c28f5055f23
SHA1

e4cfc6d716e3168fa6eab90d52f19f9fc6f29087
SHA256

544a504abde8e7efd27b8ac2add375266dc9d3003e7e44b7983f042f4724574a
SHA512

4ead4aefebfa686f0717d06a97ecff8a8a08ab11bf7db9309e9640c84958eca1f1d84096aa11ee96be3c926c593bea3899133399b759994562d00ff311703055
SSDEEP

3072:ER0LXB/VedO2TIMW5kjb0opTjz/WnJdFw0IHHsXXN/:ER0LXBde6oHsh

Score

N/A

Malware Config

Signatures

Files

544a504abde8e7efd27b8ac2add375266dc9d3003e7e44b7983f042f4724574a
.exe windows x86

1d56d6b7a06159b1a407c496387b99e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetProcAddress
GetLastError
RtlUnwind
lstrcatA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
HeapAlloc
GlobalAlloc
GetStringTypeW
lstrlenA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

GetMenuItemCount
PostMessageA
FindWindowA
DestroyWindow
SetWindowRgn
FillRect
GetSystemMetrics
FindWindowExA
SendMessageA
EnumWindows
GetDC
GetWindowTextA
SetRect
ReleaseDC
EndDialog
GetMenuStringA
GetMenuItemID

gdi32

SetBrushOrgEx
DeleteObject
SelectObject
CreatePen
CreateEllipticRgnIndirect
CreateSolidBrush
GetTextExtentPoint32A

shell32

DragQueryFileA

ole32

CoInitializeEx
GetHGlobalFromStream
CreateStreamOnHGlobal

oleaut32

SysAllocString

mpr

WNetCloseEnum

crypt32

CertCreateCRLContext

comctl32

ord16

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d56d6b7a06159b1a407c496387b99e0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

mpr

crypt32

comctl32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 5KB - Virtual size: 4KB