496da420aa62ac0e7e21558a3bcbcac457bb2db90718668cf6baff8d9add3bc7

Sharing

Copy URL

Twitter E-mail

General

Target

496da420aa62ac0e7e21558a3bcbcac457bb2db90718668cf6baff8d9add3bc7
Size

241KB
MD5

c7970f85e73cb8a5c5db8893802a0e04
SHA1

0cc323b7847a585701ad9839f5b5eccb518fdb71
SHA256

496da420aa62ac0e7e21558a3bcbcac457bb2db90718668cf6baff8d9add3bc7
SHA512

e23d084af73bfd561afec25a654dccc7d210e9f32ef740ecd6f50239019a67dbfe592637ef7a181f398402ba221a73df219d1fa58ebcad7c56e299be8225b3ca
SSDEEP

3072:Gq8+MF9hQDY+zmzB8nQn4yjOdJAdHFyDDptChfNmM4dLrx6gDMFBq:KbhUYisB8nQnku8DehAMIxg

Score

N/A

Malware Config

Signatures

Files

496da420aa62ac0e7e21558a3bcbcac457bb2db90718668cf6baff8d9add3bc7
.exe windows x64

43e10697d29215395d9c59481fc0ac9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SleepEx
UnmapViewOfFile
CreateThread
MapViewOfFile
CreateFileMappingA
GetUserDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultUILanguage
GetSystemDefaultLangID
SetEvent
WaitForSingleObject
OpenEventA
OpenFileMappingA
SetLastError
CreateMutexA
GetLastError
ReleaseMutex
GetWindowsDirectoryA
lstrcmpiA
GetFullPathNameA
OpenProcess
GetCurrentThreadId
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapReAlloc
GetCPInfo
HeapAlloc
GetACP
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
WideCharToMultiByte
HeapCreate
HeapSetInformation
ExitProcess
RtlUnwindEx
GetModuleHandleA
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetStartupInfoA
GetCommandLineA
GetTimeFormatA
GetDateFormatA
ResumeThread
ExitThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
CloseHandle
GetSystemDirectoryA
OpenFile
GetVersionExA
lstrcpynA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
LocalFree
lstrcatA
FindFirstFileA
lstrcmpA
LocalAlloc
CompareStringA
FindNextFileA
FindClose
MultiByteToWideChar
lstrcpyA
GetOEMCP
Sleep

advapi32

RegCloseKey
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA

user32

GetDesktopWindow
RegisterWindowMessageA
LoadCursorA
FindWindowA
MessageBoxA
GetMenuItemCount
FillRect
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetMenuItemInfoA
PostMessageA
RegisterClassA
GetWindowLongPtrA
SendMessageTimeoutA
SendNotifyMessageA
SendInput
SetSystemCursor
SetDoubleClickTime
CopyIcon
SetCursor
ShowCursor
DestroyWindow
PostQuitMessage
DefWindowProcA
LoadImageA
DestroyIcon
LoadBitmapA
CreateIconIndirect
GetTopWindow
LoadMenuA
GetSubMenu
InsertMenuA
DeleteMenu
DrawMenuBar
CheckMenuItem
TrackPopupMenu
KillTimer
SetTimer
GetWindowThreadProcessId
wsprintfA
GetDC
SetWindowRgn
CreateWindowExA
AttachThreadInput
GetMessageA
TranslateMessage
DispatchMessageA
SetCursorPos
ShowWindow
IsWindowVisible
FindWindowExA
GetWindow
SendMessageA
GetAncestor
GetClassNameA
GetWindowTextA
LoadStringA
GetCursorPos
ClipCursor
SetRect
GetAsyncKeyState
SystemParametersInfoA
SetForegroundWindow
TrackPopupMenuEx
WindowFromPoint
mouse_event
MessageBeep
GetForegroundWindow
GetParent
IsWindow
GetWindowDC
GetWindowRect
GetWindowLongA
ReleaseDC
CreatePopupMenu
DestroyMenu
InsertMenuItemA
DrawIconEx

gdi32

GetObjectA
SelectObject
CreateCompatibleDC
CombineRgn
GetPixel
CreateRectRgn
DPtoLP
SetTextAlign
SetTextColor
GetTextExtentPoint32A
GetStockObject
CreateCompatibleBitmap
PatBlt
DeleteDC
DeleteObject
SetBkColor
BitBlt
SetMapMode
GetMapMode
TextOutA
CreateBitmap

winmm

PlaySoundA

shell32

Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

psapi

EnumProcessModules
EnumProcesses
GetModuleFileNameExA

shlwapi

PathFileExistsA

setupapi

SetupOpenInfFileA
SetupCloseInfFile
SetupGetLineTextA

powrprof

CallNtPowerInformation

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mixggew
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

43e10697d29215395d9c59481fc0ac9e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

winmm

shell32

ole32

psapi

shlwapi

setupapi

powrprof

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 24KB - Virtual size: 45KB

.pdata Size: 6KB - Virtual size: 6KB

.rsrc Size: 53KB - Virtual size: 54KB

mixggew Size: - Virtual size: 4KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 24KB - Virtual size: 45KB

.pdata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 53KB - Virtual size: 54KB

mixggew
Size: - Virtual size: 4KB