ae93c6d2159969d38424d3160f246aa45aa4e77e80f5dfd73c9bcddc442c3719

Sharing

Copy URL Twitter E-mail

General

Target

ae93c6d2159969d38424d3160f246aa45aa4e77e80f5dfd73c9bcddc442c3719
Size

269KB
MD5

396ed4a500752cc866269079e77328ee
SHA1

3d9aaf457ee6ec08209b3a840ad9c2c4a2cdecf7
SHA256

ae93c6d2159969d38424d3160f246aa45aa4e77e80f5dfd73c9bcddc442c3719
SHA512

f4f604084b1cc9b4490e7c9cbcd3fd3c1808ca6b03a3703e8db84655bd6cf7b41a436559936c3a1109bf981de62de9d29dd85e5db46f5eb681c9ce5f6de49e62
SSDEEP

6144:xWlZYCUBOBFaIrDX/C5q+ARdqPsSkvhioJ/dg:xkZYCUBOnaIrDXaU/TqUSkEozg

Score

N/A

Malware Config

Signatures

Files

ae93c6d2159969d38424d3160f246aa45aa4e77e80f5dfd73c9bcddc442c3719
.exe windows x86

205ae5d4f3ab3e773bea483b0316df70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CreateFileW
WriteConsoleW
SetStdHandle
GetStringTypeW
GetCurrentProcessId
HeapReAlloc
HeapSize
GetCurrentProcess
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CloseHandle
LocalAlloc
LoadLibraryA
GetProcAddress
FlushFileBuffers
GetLastError
MultiByteToWideChar
GlobalUnlock
GlobalAlloc
OpenProcess
GetTickCount
LCMapStringW
GlobalLock
Sleep
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetConsoleMode
HeapAlloc
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
EncodePointer
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
LoadLibraryW
WriteFile
GetModuleFileNameW
GetModuleFileNameA

user32

EndPaint
CloseClipboard
IsIconic
SetCapture
BeginPaint
EnumWindows
GetWindowLongA
CheckDlgButton
LoadBitmapW
CloseWindow
SetClipboardData
FindWindowA
SetScrollInfo
GetClientRect

gdi32

SetMapMode
Polyline
GetStockObject
TextOutA
SetWindowExtEx

comdlg32

PrintDlgA

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen
SysFreeString
VariantClear

psapi

GetModuleBaseNameA
EnumProcessModules

activeds

ord9

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

205ae5d4f3ab3e773bea483b0316df70

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

psapi

activeds

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 184KB - Virtual size: 212KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 184KB - Virtual size: 212KB

.rsrc
Size: 1KB - Virtual size: 1KB