7eccf6d9406ccd991c41f28b0437ff0450441c291fa0513c20511f0e14991d30

Sharing

Copy URL

Twitter E-mail

General

Target

7eccf6d9406ccd991c41f28b0437ff0450441c291fa0513c20511f0e14991d30
Size

89KB
MD5

9a2187fa5e1a7362c422a98edc66b017
SHA1

7188e69d7d1703cf3bffd626560c78402290e712
SHA256

7eccf6d9406ccd991c41f28b0437ff0450441c291fa0513c20511f0e14991d30
SHA512

76f81794b014eea42b65513251e7b106c7c8e49750b5004b1c18d0f5afce45749e87a0a6cc59688e1e0313f4c0086489e7a4f50c0eb39ee60f2023d36212fa51
SSDEEP

1536:TWCtl4GLkrdi/ZAXDwdARKY4Leh9X+zBTk++tXGKW7h9FRhL:TWCoJ+ZYDmARQeNQA++tXlMRhL

Score

N/A

Malware Config

Signatures

Files

7eccf6d9406ccd991c41f28b0437ff0450441c291fa0513c20511f0e14991d30
.exe windows x86

2ae359f0a8982e75c3031d71c80aa212

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetStringTypeW
LCMapStringW
LoadLibraryW
HeapSize
IsProcessorFeaturePresent
Sleep
GetOEMCP
GetACP
GetCPInfo
SetConsoleCursorPosition
LeaveCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCurrentThreadId
FillConsoleOutputAttribute
GetConsoleScreenBufferInfo
GetLastError
MultiByteToWideChar
IsValidCodePage
ReadFile
HeapCreate
GetCurrentProcess
HeapAlloc
SetFilePointer
FillConsoleOutputCharacterA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
GetFileSize
EnterCriticalSection
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
ExitProcess
WriteFile

user32

SetCursor
RemovePropW
LoadMenuIndirectA
LoadBitmapA
LoadMenuA
GetClientRect
GetDC
GetForegroundWindow
InvalidateRect
ReleaseDC
GetDlgItem
SetWindowLongW
DefWindowProcA
SendMessageW
UpdateWindow
LoadCursorA
GetPropW
CallWindowProcW

gdi32

CreateFontIndirectW
SetPixel
SelectObject
GetTextExtentPointW
CreatePen
GetTextMetricsA
GetStockObject
GetTextMetricsW

advapi32

IsTextUnicode

shlwapi

StrCpyNW

comctl32

ord17

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ae359f0a8982e75c3031d71c80aa212

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 18KB - Virtual size: 18KB