860eea8b12578b6d0f57d12d737ebc5cd4161217d9249a16786425134ee582c8

Sharing

Copy URL Twitter E-mail

General

Target

860eea8b12578b6d0f57d12d737ebc5cd4161217d9249a16786425134ee582c8
Size

168KB
MD5

9c6fa9742c55868faecd4458ae94aeb3
SHA1

928bc3badfad5d6792b4202a3f1d0ecf5f7af50e
SHA256

860eea8b12578b6d0f57d12d737ebc5cd4161217d9249a16786425134ee582c8
SHA512

68b86254d8032f7f6bd18d0e7f5bef53a864a921357c6af3eb27a36dfe1d217cf598020ddbd918c66e89c09a108fdb06cce7de72c27ca47d69c5a5da2cb5441c
SSDEEP

3072:tGWCLH+79MjjC9fuJT+WLv548SINnB1LEP8SjVV+jqnivcTAD9c+0Oqj3qzSt:+AuHC9++WLv54NIJjoHVZiUTAD92OqjX

Score

N/A

Malware Config

Signatures

Files

860eea8b12578b6d0f57d12d737ebc5cd4161217d9249a16786425134ee582c8
.exe windows x86

677defff6acc6e91cfd34b98982857cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ReadConsoleOutputCharacterA
MultiByteToWideChar
GetModuleHandleA
SetStdHandle
CreateTimerQueueTimer
GetPriorityClass
GetOEMCP
GetCPInfoExA
GetPrivateProfileIntA
LocalFree
SetCommBreak
UnregisterWaitEx
DeleteFiber
HeapLock
OpenFile
SetThreadIdealProcessor
HeapWalk
GetVolumePathNameW
GetCurrentProcessId
CancelTimerQueueTimer
CreateMailslotA
CallNamedPipeA
Module32Next
GetLocaleInfoW
CreateJobObjectW
WriteProfileSectionW
GlobalFindAtomA
IsValidLanguageGroup

msvcrt

_execvpe
_wspawnve
__p__commode
_wsopen
wcstoul
sprintf
_vscprintf
_lfind
_tzname
_acmdln
__setusermatherr
_mbsnbicoll
_msize
_initterm
_control87
strstr
vwprintf
_XcptFilter
_fputwchar
_controlfp
__set_app_type
_outpd
fsetpos
fgetwc
exit
strcoll
_ismbblead
atan2
_aligned_offset_malloc
_hypot
_mbslen
_cabs
_exit
_filelength
__p__fmode
_iob
_adjust_fdiv
_setjmp
_mktemp
_timezone
_fgetwchar
_except_handler3
__getmainargs
strchr

gdi32

GdiPlayPrivatePageEMF
DeviceCapabilitiesExW
ColorMatchToTarget
GetKerningPairsA
GetMiterLimit
StretchDIBits
CreateEllipticRgn
SetTextJustification
OffsetRgn
CreatePalette
GetWinMetaFileBits
GetWorldTransform
GetEnhMetaFileBits
GetCharABCWidthsW
PtInRegion
GetTextCharsetInfo
TextOutW
UnrealizeObject
ExtCreateRegion
StartPage
CreateICW
SetBitmapDimensionEx
EndPath
GetTextExtentExPointA
CreateHalftonePalette
GetCharacterPlacementW
GetEnhMetaFilePixelFormat

user32

DdeAddData
CharLowerBuffW
DdeGetLastError
CreateIcon
EnumPropsExW
GetClassInfoA
GetTopWindow
MonitorFromPoint
CharToOemW
GetClipboardViewer
GetGUIThreadInfo
GetTabbedTextExtentA
DialogBoxIndirectParamA
InsertMenuA
WaitMessage
SetCaretPos
VkKeyScanExA
CharUpperW
RedrawWindow
MessageBoxW
DispatchMessageW
ActivateKeyboardLayout
EnumDisplayDevicesA
CheckRadioButton
WINNLSEnableIME
IMPGetIMEW
DestroyAcceleratorTable

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

677defff6acc6e91cfd34b98982857cb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 512B - Virtual size: 68KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 512B - Virtual size: 68KB

.rsrc
Size: 9KB - Virtual size: 9KB