87d0fa75bce83694ce7f87922863eea582d19cd2ff0760341b27a93018946aae

Sharing

Copy URL Twitter E-mail

General

Target

87d0fa75bce83694ce7f87922863eea582d19cd2ff0760341b27a93018946aae
Size

78KB
MD5

3273622e1c20569f20c405d170d4ea4b
SHA1

bbdf0182b82e1a3dfc9c83ddcea69eb22757d03e
SHA256

87d0fa75bce83694ce7f87922863eea582d19cd2ff0760341b27a93018946aae
SHA512

b7a24c8cf874b659e58cdad7a07b9c8a00270600fc544bdc32a223d0eec640988f76c561c0a50c4f87e86c42bb0c8d9891e8a67e420d8bf659b44bbb96bca256
SSDEEP

1536:/p0RG9slSijRC0+hfhcIFh4rNiczYRbRu5cz0E:2Ru4C06fhcIFhvcUbROg

Score

N/A

Malware Config

Signatures

Files

87d0fa75bce83694ce7f87922863eea582d19cd2ff0760341b27a93018946aae
.exe windows x86

d45b8e0cbe31f41999901e58a1f9dcb6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

InsertMenuA
GetCursor
IsZoomed
WaitMessage
CreateDialogParamW
OemToCharW
GetClassLongW
ScrollWindowEx
GetClassInfoA
MessageBoxExW
CreateAcceleratorTableA
PostThreadMessageW
IsCharAlphaNumericW
CharNextExA
UnregisterClassW
MapVirtualKeyW
GetWindowThreadProcessId
InvalidateRgn
GetMenuItemRect
ActivateKeyboardLayout
UnionRect
EndPaint
GetKeyboardLayoutNameA
GetCaretBlinkTime
EqualRect
LoadCursorFromFileW
RegisterClipboardFormatW
OemToCharBuffA
MapVirtualKeyA
GetClassLongA
ShowWindow
CharLowerBuffA

kernel32

GetProcAddress
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
CloseHandle
CreateFileW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
RtlUnwind
HeapFree
Sleep
IsProcessorFeaturePresent
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
WriteConsoleW
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetLastError
CopyFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d45b8e0cbe31f41999901e58a1f9dcb6

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 2KB - Virtual size: 2KB