907aad649b1a1460806ee84e0523fdafb6129c3360322305909591e9d561be87

Sharing

Copy URL Twitter E-mail

General

Target

907aad649b1a1460806ee84e0523fdafb6129c3360322305909591e9d561be87
Size

81KB
MD5

461839557b69ff6f2f295db0df527df3
SHA1

d4fd700d839051c53241ac49fe09ac41619a69da
SHA256

907aad649b1a1460806ee84e0523fdafb6129c3360322305909591e9d561be87
SHA512

ae495bd7765da911a470c69ee86bdc0772c572ef8b551d0a73a2b2d4a4def2add99e316771af6d6e847eb1772a528a738cedd3eef583f3787417461b2f2f9641
SSDEEP

1536:5u+if5ewVTFLciyS3smctp0VgNHhSjLgSzkw1HrwRyhLmx2K7Uk:52ppLcnrtegmjhXFrWyhCx2KQk

Score

N/A

Malware Config

Signatures

Files

907aad649b1a1460806ee84e0523fdafb6129c3360322305909591e9d561be87
.exe windows x86

a906c7682a9e4726558fd4c77640bb59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrlenA
CloseHandle
WriteFile
SetFilePointer
CreateFileA
Sleep
ExitProcess
lstrcatA
GetTempPathA
lstrcmpiA
ReadFile
LoadLibraryA
GetLastError
GetProcAddress
GetModuleHandleA
OpenMutexA
CreateMutexA
GetTickCount
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetVolumeInformationA
GetLocalTime
SetThreadPriority
GetCurrentThread
GetSystemDirectoryA
GetModuleFileNameA
CreateThread
InitializeCriticalSection
DeleteFileA
GetWindowsDirectoryA
SetFileAttributesA
GetFileSize
DeviceIoControl
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalMemoryStatus
GetVersionExA
CreateFileW
WriteConsoleW
SetStdHandle
RtlUnwind
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
HeapSetInformation
EncodePointer
DecodePointer
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
GetModuleFileNameW
HeapCreate
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetConsoleCP
GetConsoleMode
GetStringTypeW
FlushFileBuffers

user32

SetClipboardData
wsprintfA
EmptyClipboard

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a906c7682a9e4726558fd4c77640bb59

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 26KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 26KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB