c4ce89568bfa500f9fcc48472d1b7a5f98690918c439f22c99e370c7140a58be

Sharing

Copy URL Twitter E-mail

General

Target

c4ce89568bfa500f9fcc48472d1b7a5f98690918c439f22c99e370c7140a58be
Size

150KB
MD5

4638feb374037ca20d7fb8c7187fdd08
SHA1

4d145a23908040ef69020e016cb87960d9a575f8
SHA256

c4ce89568bfa500f9fcc48472d1b7a5f98690918c439f22c99e370c7140a58be
SHA512

601eb9438dd5a61f4fa2e20e15c2cd5de2b28d92e5807bccea9b685d3c9c6132ee3b130931ff67eb2bed9255a9aff328a37c7fb2418fb4febcb860c549366d4a
SSDEEP

3072:OL3hs3xRL4DUAsGNvQ3GrRLMFxxiLVnYjTt9qKd6:03hCzLSkkQ2SLiLIDqz

Score

N/A

Malware Config

Signatures

Files

c4ce89568bfa500f9fcc48472d1b7a5f98690918c439f22c99e370c7140a58be
.exe windows x86

ac84e642c59a17de967c0e2356ba5d04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetSystemDirectoryW
GetModuleFileNameW
GetSystemDirectoryA
lstrlenW
FlushInstructionCache
GetTempPathW
OpenMutexW
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
OpenMutexA
GetModuleFileNameA
GetModuleHandleA
IsDebuggerPresent
VirtualProtect
GetCurrentDirectoryA
GetTickCount
GetWindowsDirectoryW
GetVersion
GetTempPathA
GetSystemTime
VirtualQuery
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
WideCharToMultiByte
GetModuleHandleW
OutputDebugStringW
GetComputerNameW
GetCurrentProcess
lstrlenA
GetComputerNameA
OutputDebugStringA
ExitProcess
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
RaiseException

user32

GetWindowTextLengthW
GetWindowRect
IsIconic
IsZoomed
LoadBitmapA
LoadCursorW
GetForegroundWindow
GetWindowTextA
GetWindowTextW
IsWindowUnicode
GetDesktopWindow
LoadBitmapW
IsWindowVisible
LoadCursorA
GetProcessDefaultLayout

advapi32

GetCurrentHwProfileW
GetUserNameA
RegOpenKeyExW
RegOpenKeyExA
GetUserNameW
GetCurrentHwProfileA
RegFlushKey

Sections

�text
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac84e642c59a17de967c0e2356ba5d04

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

�text Size: - Virtual size: 24KB

.text Size: 63KB - Virtual size: 63KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 70KB - Virtual size: 69KB

�text
Size: - Virtual size: 24KB

.text
Size: 63KB - Virtual size: 63KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 70KB - Virtual size: 69KB