8d66d39434997496f7d03da1acfef598ae382c17a3d1c54796035a60ced930b1

Sharing

Copy URL Twitter E-mail

General

Target

8d66d39434997496f7d03da1acfef598ae382c17a3d1c54796035a60ced930b1
Size

51KB
MD5

6daa2a4053024e5801235ff8b3b22130
SHA1

d8b41e04840b52bfaa88a129dfd5145163287e9a
SHA256

8d66d39434997496f7d03da1acfef598ae382c17a3d1c54796035a60ced930b1
SHA512

d2730c429b1d05096d55814e656c6969ea0ee1d5b3bedf838def9e84b662161cb908e22f8989189b396fa30e30f498387b58e1c6f562dcbd013850080439732a
SSDEEP

768:+MePda8dyOxg4UHTP9o1h8Lw52cn2lEDCMmXBundk0PW75mrdXd5v/h:+M+da8Jxg4UHTP988oRmsZWNmrdXH3h

Score

N/A

Malware Config

Signatures

Files

8d66d39434997496f7d03da1acfef598ae382c17a3d1c54796035a60ced930b1
.exe windows x86

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

RegisterFormatEnumerator
URLOpenPullStreamA
URLDownloadToCacheFileW

wininet

RetrieveUrlCacheEntryFileA
InternetFindNextFileA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExW
InternetReadFile

gdi32

Chord
AddFontMemResourceEx
CreateDCA
AddFontResourceA
ColorMatchToTarget
AngleArc

crypt32

CryptGetAsyncParam
CertIsValidCRLForCertificate
CryptMsgClose
CryptMsgControl
CertAddCertificateContextToStore
CryptEnumKeyIdentifierProperties

mpr

WNetGetConnectionW
WNetAddConnectionA
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetGetLastErrorA
WNetGetLastErrorW

kernel32

LoadLibraryW
RtlUnwind
HeapReAlloc
HeapSize
GetOEMCP
Sleep
HeapFree
EnterCriticalSection
LeaveCriticalSection
CopyFileExW
DeleteTimerQueue
VerLanguageNameA
FindFirstChangeNotificationW
GetHandleInformation
WriteProcessMemory
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
HeapAlloc
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15dfaf0d4711f50a6e128ae513f7cd83

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

wininet

gdi32

crypt32

mpr

kernel32

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 86KB - Virtual size: 86KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 86KB - Virtual size: 86KB