854c7e1785ece9b11739621fd863593e3a142ddeaa95a10e50b30e8329b5704e

Sharing

Copy URL

Twitter E-mail

General

Target

854c7e1785ece9b11739621fd863593e3a142ddeaa95a10e50b30e8329b5704e
Size

100KB
MD5

b952ad33f9e9d0115e423048488126d3
SHA1

20636afd4d29ba58949fc3ab8b99279ac4fd3b24
SHA256

854c7e1785ece9b11739621fd863593e3a142ddeaa95a10e50b30e8329b5704e
SHA512

c100fd995a87a8076dcabec00d16863fadf979df189d0c4930cc71a33c6417500dcd309dcc0ba6c46e187e47b0704985e20da971da47edc1f140ffd1d83de102
SSDEEP

1536:MI489D3wHuIa/+fxstMkgo9HcJALC5Dj4444Jlx7xk:VhoQ8+u5Dj4444Jlx1

Score

N/A

Malware Config

Signatures

Files

854c7e1785ece9b11739621fd863593e3a142ddeaa95a10e50b30e8329b5704e
.exe windows x86

1edcc70d032c0e722b44195703d230af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetLocaleInfoA
lstrcpynA
InterlockedIncrement
InterlockedDecrement
Process32First
GlobalLock
WaitForSingleObject
GetTickCount
WriteFile
GlobalAlloc
Sleep
ExitThread
MultiByteToWideChar
lstrlenW
GlobalUnlock
GetLastError
SetFileAttributesA
Process32Next
DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CreateToolhelp32Snapshot
CloseHandle
GetTempPathA
lstrcpyW
CreateThread
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
WideCharToMultiByte
LocalFree
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount

user32

EmptyClipboard
keybd_event
CloseClipboard
GetClassNameA
GetWindowRect
SendInput
GetMenuItemID
PostMessageW
SetForegroundWindow
FindWindowExA
GetWindowThreadProcessId
SendMessageA
EnumWindows
wsprintfW
GetForegroundWindow
MapVirtualKeyA
SetFocus
CharLowerBuffA
SetWindowPos
BlockInput
ShowWindow
IsWindow
PostMessageA
OpenClipboard
GetSystemMetrics
IsWindowVisible
SendMessageW
SetClipboardData
FindWindowA
VkKeyScanA

shell32

ShellExecuteA

ole32

CoInitialize
OleRun
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocString
GetErrorInfo

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1edcc70d032c0e722b44195703d230af

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 6KB