977b008cffffc52170d4f303344205e6e9e8c1ae7d488e1084423933437b4d5e

Sharing

Copy URL Twitter E-mail

General

Target

977b008cffffc52170d4f303344205e6e9e8c1ae7d488e1084423933437b4d5e
Size

108KB
MD5

d3c0817aa3000cf5ea0c00eddf1fb6df
SHA1

0eb77fb749bf41b9adbb511c33d38135bfdfe16f
SHA256

977b008cffffc52170d4f303344205e6e9e8c1ae7d488e1084423933437b4d5e
SHA512

2a6f7f46f52f472728466a740c02140f463e06864b2548559cbe8b0c4b2f8a210ce95b17f9f2d76913ac5494dade1c09fc014204e272cd9ad18fa01c13c96b20
SSDEEP

1536:qrDom7icc7bbUyonLv0WxTQRxruxREtkxCiiMn/zqsUjL66km:EDomLLvhxTQR0DEyxCiiM+sR6D

Score

N/A

Malware Config

Signatures

Files

977b008cffffc52170d4f303344205e6e9e8c1ae7d488e1084423933437b4d5e
.exe windows x86

5529e21765890ecbf7897c2675db6157

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractAssociatedIconA
ShellExecuteExW
ShellExecuteA
FindExecutableA
ShellExecuteW
DoEnvironmentSubstW
DragFinish

ole32

OleCreateLink
RevokeDragDrop
CoGetCallContext
OleDoAutoConvert
CoIsOle1Class
StgOpenStorage
OleCreateLinkEx
OleMetafilePictFromIconAndLabel

advapi32

ObjectPrivilegeAuditAlarmA
DuplicateTokenEx
MakeAbsoluteSD
ReportEventA
EnumServicesStatusA
ConvertToAutoInheritPrivateObjectSecurity
StartServiceW
SetServiceObjectSecurity

kernel32

GetConsoleCP
SetFilePointer
LoadLibraryW
HeapReAlloc
FlushFileBuffers
IsProcessorFeaturePresent
SetStdHandle
HeapSize
TlsGetValue
HeapSetInformation
SetEnvironmentVariableA
RequestWakeupLatency
GetCalendarInfoA
SetTapePosition
SleepEx
GetLastError
GetFullPathNameA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapCreate
GetCommandLineA
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetDriveTypeW
HeapFree
WriteConsoleW
MultiByteToWideChar
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
LCMapStringW
CreateFileW
CloseHandle
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
GetCurrentDirectoryW
GetStringTypeW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5529e21765890ecbf7897c2675db6157

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

advapi32

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 21KB

.rsrc Size: 42KB - Virtual size: 42KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 21KB

.rsrc
Size: 42KB - Virtual size: 42KB