16c8f43b757cc73a408312555013df2e3ea67cfe34baff92d58e0a8b4f4eff91

Sharing

Copy URL Twitter E-mail

General

Target

16c8f43b757cc73a408312555013df2e3ea67cfe34baff92d58e0a8b4f4eff91
Size

94KB
MD5

67a3c8e4dcb06746fcef6f9c88437eae
SHA1

7987e3608d5b0d82ab5542c156440ae2c69b1a9c
SHA256

16c8f43b757cc73a408312555013df2e3ea67cfe34baff92d58e0a8b4f4eff91
SHA512

2afe65de8e96be3bf69ffa1160c98aef02aeac7bc3de7eeeb91ca55b6fd64030375e2257a9dffbd7b92b949d23985764d261f4fd0274a52930b117cbaccf8483
SSDEEP

1536:a9ABIBqLy567TLWjjqYcosS7Xctr5KSEe2GEG80m3zJcQpSFkj1NTxVC0awK5989:a9ghLy567Tya3oOt9KSEd04L7j3/a

Score

N/A

Malware Config

Signatures

Files

16c8f43b757cc73a408312555013df2e3ea67cfe34baff92d58e0a8b4f4eff91
.exe windows x86

31e6cfd31f60f4f8ec720069bb51c11f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CancelWaitableTimer
CloseHandle
CreateFileA
DeleteCriticalSection
ExitProcess
FatalAppExitA
GetACP
GetCPInfo
GetCommandLineA
GetCurrencyFormatW
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetOEMCP
GetPriorityClass
GetPrivateProfileSectionNamesW
GetProcAddress
GetProcessHeap
GetQueuedCompletionStatus
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetMessageWaitingIndicator
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
WriteFileEx
WriteProfileStringA
GetVolumeInformationA

user32

ChildWindowFromPoint
DdeEnableCallback
DdeQueryConvInfo
EnumThreadWindows
FindWindowW
GetActiveWindow
GetClipCursor
GetIconInfo
GetLastInputInfo
GetSysColorBrush
IsWindowUnicode
LoadMenuIndirectA
LookupIconIdFromDirectoryEx
MessageBoxA
SendMessageCallbackA
SetClassLongA
SetPropW
TranslateAcceleratorA
wsprintfA

ole32

CoGetTreatAsClass
CoRegisterPSClsid
CoSetProxyBlanket
OleGetAutoConvert
OleGetIconOfFile

urlmon

CoInternetCreateSecurityManager
CopyBindInfo
HlinkNavigateString
RegisterFormatEnumerator

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31e6cfd31f60f4f8ec720069bb51c11f

Headers

File Characteristics

Imports

kernel32

user32

ole32

urlmon

Sections

.text Size: 33KB - Virtual size: 36KB

.data Size: 13KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 33KB - Virtual size: 36KB

.data
Size: 13KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 2KB - Virtual size: 4KB