b0d0e050df3059d2bee5d16f8fff47648759cf2bfe3dea1c0bc3be60c8669054

Sharing

Copy URL Twitter E-mail

General

Target

b0d0e050df3059d2bee5d16f8fff47648759cf2bfe3dea1c0bc3be60c8669054
Size

155KB
MD5

3ba5746b21cfb3e299ae7a4381ea3a82
SHA1

9bbe8b234a6f1104ae0fc47c91ec61d16ab1dfb2
SHA256

b0d0e050df3059d2bee5d16f8fff47648759cf2bfe3dea1c0bc3be60c8669054
SHA512

64d439539ac3e471bf641209b23b21ef646bb5b4b3036e5c39241f8af29f85d2cce99c58077e84655f1fb2d514689bdffee182fcab7adece8254fcf2bd6cda65
SSDEEP

3072:3zbtCJ943mfDmETTYX+iDqmHVUdNNCk9IClq/BYrIiS1q/Ib:3zbtI4C85DCzwkCClsY/Sz

Score

N/A

Malware Config

Signatures

Files

b0d0e050df3059d2bee5d16f8fff47648759cf2bfe3dea1c0bc3be60c8669054
.exe windows x86

674ce548b34b60abc85e46f18edd2ab7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
SuspendThread
GetThreadSelectorEntry
GetCurrentProcess
FatalAppExitW
SetFileAttributesA
GetLongPathNameA
GetCalendarInfoA
OpenJobObjectW
GetPriorityClass
GetStartupInfoA
SetConsoleCtrlHandler
GetLongPathNameW
SetConsoleOutputCP
UnhandledExceptionFilter
IsBadStringPtrA
SetLastError
GetConsoleTitleA
FindNextFileW
LoadLibraryA
GetCurrentThread
GetCurrentProcessId
GetLocaleInfoW
FlushInstructionCache
BeginUpdateResourceA
GetModuleHandleA
EnumUILanguagesA
CancelTimerQueueTimer
SetTimeZoneInformation
GetCPInfoExA

msvcrt

_getsystime
__getmainargs
_memicmp
_environ
tmpfile
__setusermatherr
getwchar
_scprintf
qsort
exit
_initterm
__set_app_type
_strlwr
atoi
_adjust_fdiv
tanh
putchar
__p__fmode
_XcptFilter
fgets
wcscspn
isxdigit
_except_handler3
fputwc
_exit
_mbscpy
_mbsnbcmp
_strdup
__p__commode
_beginthread
_getch
_beginthreadex
_get_sbh_threshold
_ismbstrail
_controlfp
_memccpy
_mbcjmstojis
_acmdln
_wstat
strspn
_nextafter
fgetc
_adj_fdiv_m64

user32

CloseClipboard
CreateAcceleratorTableA
EnumDesktopsA
AdjustWindowRectEx
RegisterClassExW
DlgDirSelectExA
ClientToScreen
RemovePropA
DlgDirSelectExW
ImpersonateDdeClientWindow
SetWindowRgn
CreateWindowStationA
DdeSetQualityOfService
LoadAcceleratorsW
GetNextDlgGroupItem
OpenInputDesktop
IsCharAlphaNumericA
LoadMenuW
EditWndProc
CreateDialogIndirectParamW
GetLastActivePopup
SetClassWord
ToUnicode
ChildWindowFromPoint
EndPaint
IMPSetIMEA
MonitorFromWindow
InternalGetWindowText

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

674ce548b34b60abc85e46f18edd2ab7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 512B - Virtual size: 76KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 512B - Virtual size: 76KB

.rsrc
Size: 9KB - Virtual size: 9KB