4b32cd79b7ab772567d4a10094a923b0f9b2811d19eb87f262f591ab734707f8

Sharing

Copy URL

Twitter E-mail

General

Target

4b32cd79b7ab772567d4a10094a923b0f9b2811d19eb87f262f591ab734707f8
Size

100KB
MD5

b3f8705fd5ae5e3e02b0bdef0a955351
SHA1

d33e2e51fbf98fdcd6a0d2524618d690938e5710
SHA256

4b32cd79b7ab772567d4a10094a923b0f9b2811d19eb87f262f591ab734707f8
SHA512

74de3b233e86668a7be5d2f35c13355853f0626290e733763648bf2ed5b7aec12e9fb2aaaa3fdaab6a547447741d4e6c3d9884aca578eb272ac24317c580378d
SSDEEP

1536:v2On8laZrWz/TnOKDMuYEdOWfBtidfAVmSpREV14cENid:v2OnWTpDMNYBBuARpRQ14Nid

Score

N/A

Malware Config

Signatures

Files

4b32cd79b7ab772567d4a10094a923b0f9b2811d19eb87f262f591ab734707f8
.exe windows x86

870d9116f7fcc7f72dc1e1254d42a8e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EmptyClipboard
SendMessageW
UpdateWindow
GetFocus
PtInRect
ReleaseCapture
MessageBeep
IntersectRect
LoadIconW
SetRect
MessageBoxW

kernel32

HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetProcessVersion
GetVersionExA
GetCurrentProcessId
GetTickCount
CreateMutexA
GetEnvironmentStringsW
CreateSemaphoreA
GetStdHandle
HeapReAlloc
CreateEventA
GetCommandLineA
GetPriorityClass
GetCommandLineW
GetEnvironmentStrings
GetModuleHandleA
lstrcmpA
VirtualAlloc
LocalFree
DeleteFileW
WriteFile
FormatMessageW
FreeLibrary
LoadLibraryA
GetModuleHandleW
GlobalAlloc
SetEndOfFile
HeapCreate
GetCurrentThread
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetProcAddress
ExitProcess
DecodePointer
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapDestroy
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryW

crypt32

CertFindSubjectInCTL

rtm

RtmReleaseEntities

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

870d9116f7fcc7f72dc1e1254d42a8e8

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

crypt32

rtm

Sections

.text Size: 46KB - Virtual size: 45KB

.data Size: 49KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 46KB - Virtual size: 45KB

.data
Size: 49KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 4KB