6874e57eac25b8dbb0ab072f397cda26cce1e5825f5f3d0e8e7dce22d5c01923

Sharing

Copy URL

Twitter E-mail

General

Target

6874e57eac25b8dbb0ab072f397cda26cce1e5825f5f3d0e8e7dce22d5c01923
Size

129KB
MD5

d15199f584ce7dd8bcabce301d51a429
SHA1

2d7a1141c89d75cadc89f0836fde298a6edc491b
SHA256

6874e57eac25b8dbb0ab072f397cda26cce1e5825f5f3d0e8e7dce22d5c01923
SHA512

94588d59dc1de4011958509dbf9bb973a8facd319b5a792eecfeca5b1c2fe7005efaebca41de30f5ad7cff6df23f530196c6ae15a3f64e6377535d7261400d45
SSDEEP

3072:WA2kqFM8PFl24xowZvAa/OYpstFhVpnvUuJFvb2:fGPPvDGLtFhAwk

Score

N/A

Malware Config

Signatures

Files

6874e57eac25b8dbb0ab072f397cda26cce1e5825f5f3d0e8e7dce22d5c01923
.exe windows x86

2a2db93ee9db089547e864fc63cb0484

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
HeapReAlloc
IsProcessorFeaturePresent
GetLastError
HeapCreate
LoadLibraryW
GlobalAlloc
GetProcessHeap
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount

user32

DestroyWindow
GetMessageA
GetClassNameA
GetWindowRect
GetWindowDC
GetSubMenu
GetParent
LoadIconA
GetWindowInfo
wsprintfA
GetClientRect
SendMessageA
EnumWindows
CreateIconIndirect
GetDC
TranslateMessage
GetWindowTextA
MessageBoxA
InvalidateRect
SetCursorPos
UnregisterClassA
GetWindowLongA
GetWindowTextW
CreateWindowExA
ReleaseDC
EnableMenuItem
GetDlgItem
GetDesktopWindow
SetWindowPos
ShowWindow
DrawMenuBar
DispatchMessageA
GetSystemMetrics
CloseWindow
FindWindowA
LoadCursorA
SetDlgItemTextA
RegisterClassA
MoveWindow

gdi32

DeleteDC
GetFontLanguageInfo
SetPixel
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetTextMetricsA
GetFontData
GetPixel
GetObjectA
GetStockObject
GetTextExtentPoint32W

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a2db93ee9db089547e864fc63cb0484

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 101KB - Virtual size: 104KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 101KB - Virtual size: 104KB

.rsrc
Size: 1KB - Virtual size: 1KB