a6af4259c8f3b9cf31029c0f429d135542473750f61248badc325e088b1a27a3

Sharing

Copy URL

Twitter E-mail

General

Target

a6af4259c8f3b9cf31029c0f429d135542473750f61248badc325e088b1a27a3
Size

226KB
MD5

a8a50e0c335dc285029c69c90d02de9d
SHA1

9648c86e7646574feceba8ed6a3cec5fdb1b9bad
SHA256

a6af4259c8f3b9cf31029c0f429d135542473750f61248badc325e088b1a27a3
SHA512

156b10fa5f0d6933a63be8deaf9a2bab2c0477ee6573b6e6785b7f3b4859b474e25c24a9c56ce72a3a388e724e9037e5fe66feb526681ec74b056ab39d265c40
SSDEEP

3072:VEsN2n59ItLDtUqMOA3Ag0Fu5i+yiFyHi9/9GOagN9uhX2TjbmVXF:VEI2n59ItLlwAOoioHi9IHhmvbmVXF

Score

N/A

Malware Config

Signatures

Files

a6af4259c8f3b9cf31029c0f429d135542473750f61248badc325e088b1a27a3
.exe windows x86

b9bcb9125aa74ceddafa191025995a91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_Draw
ImageList_DrawEx
ImageList_Remove
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_Read
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize

kernel32

UnlockFileEx
InitializeCriticalSectionAndSpinCount
DeleteAtom
PeekConsoleInputA
GetDriveTypeA
DeleteCriticalSection
CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateThread
EnterCriticalSection
EnumCalendarInfoA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetStringTypeExA
GetSystemInfo
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
Sleep
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
LeaveCriticalSection
GetModuleHandleW
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapAlloc
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
LCMapStringA
LCMapStringW
HeapReAlloc
LoadLibraryA
RtlUnwind
GetLocaleInfoW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
RaiseException
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9bcb9125aa74ceddafa191025995a91

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

kernel32

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 247KB

.rsrc Size: 69KB - Virtual size: 69KB

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 247KB

.rsrc
Size: 69KB - Virtual size: 69KB