ba475e620050ccfa82e537ad144bd2b84c114c8da825360c29e82351d31f8af7

Sharing

Copy URL Twitter E-mail

General

Target

ba475e620050ccfa82e537ad144bd2b84c114c8da825360c29e82351d31f8af7
Size

813KB
MD5

cd99c8425d67e2f97bec8007669af20f
SHA1

c1d44e7fa8b985e1dd10ea641e68dad49e862cf1
SHA256

ba475e620050ccfa82e537ad144bd2b84c114c8da825360c29e82351d31f8af7
SHA512

8b0baefe72129564a4bc46a1f4b5afb94259292e6e082a1f0fbfe4da1e392841a56e4d6e8260c8ed14a7c7093fd51428b20090b2c0868ee93d88b18b5744a014
SSDEEP

24576:hfvoC/HTmEwiQexZLTXfm4wBUFABdC87TzHBtR:L/zmEwi7X/vm4wGF2C87T7Bt

Score

N/A

Malware Config

Signatures

Files

ba475e620050ccfa82e537ad144bd2b84c114c8da825360c29e82351d31f8af7
.exe windows x86

df245c1dd3006f36dd229ef8235baf99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
Sleep
GetAtomNameA
InterlockedCompareExchange
TlsAlloc
OpenMutexA
GetCommandLineW
AddAtomA
GetLastError
GetStartupInfoA
CreateMutexW
CloseHandle
GetTimeZoneInformation
SetLastError
TlsFree
ReleaseMutex
InterlockedDecrement
SetUnhandledExceptionFilter
GetCommandLineA
InterlockedIncrement
FreeLibrary
GetProcAddress
GetTickCount
FindAtomA
GetVersionExW
ExitProcess
WaitForSingleObject
VirtualProtectEx
TlsSetValue
ReleaseSemaphore
LoadLibraryA
OpenMutexW
CreateSemaphoreA
GetModuleHandleA
CreateMutexA

user32

MessageBoxA
FindWindowW
RegisterWindowMessageA
RegisterWindowMessageW
GetWindowThreadProcessId
SendMessageA
SetWindowTextW
SetForegroundWindow
BringWindowToTop
AttachThreadInput
SystemParametersInfoW
IsIconic
FlashWindowEx
UnregisterHotKey
FindWindowA
ShowWindow
RegisterHotKey
SendMessageW
GetForegroundWindow
SetWindowTextA

shell32

ShellExecuteW
ShellExecuteA

shlwapi

StrRetToBufA

wldap32

ord47

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 766KB - Virtual size: 765KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat_0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df245c1dd3006f36dd229ef8235baf99

Headers

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

wldap32

Sections

.text Size: 24KB - Virtual size: 23KB

.itext Size: 766KB - Virtual size: 765KB

.data Size: - Virtual size: 5.4MB

.tls Size: - Virtual size: 101B

.rsrc Size: 19KB - Virtual size: 18KB

.idat_0 Size: 2KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 23KB

.itext
Size: 766KB - Virtual size: 765KB

.data
Size: - Virtual size: 5.4MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 19KB - Virtual size: 18KB

.idat_0
Size: 2KB - Virtual size: 2KB