a21c03f522f627c76271069d801f766d11452d06872358c68e450ea86ac2df9e

Sharing

Copy URL Twitter E-mail

General

Target

a21c03f522f627c76271069d801f766d11452d06872358c68e450ea86ac2df9e
Size

42KB
MD5

680c5514e6a9b0d539b9e387ec7745c1
SHA1

1c160886db4f9052f809af2533a0621b87334d76
SHA256

a21c03f522f627c76271069d801f766d11452d06872358c68e450ea86ac2df9e
SHA512

721d8a175600db84da4e882f5dec4ff3c3467859a7d5078fe8f0cea31be6d9cd64b865ba9b2fe9b94b27699e1bd8661c30d1c43ce449ddb37cada8a7593e8772
SSDEEP

768:0INYALCeB/JxMIBSh33YMZ0oKZZqgOpEMOw5dYGgk96QczMa0qH:pCeB/JWIBSpjZAqhhOoFqSa0Q

Score

N/A

Malware Config

Signatures

Files

a21c03f522f627c76271069d801f766d11452d06872358c68e450ea86ac2df9e
.exe windows x86

f0a0946ecdb2cc74be770e4a72d5de55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_wsopen
isspace
_cputws
__p__commode
_getche
_CIasin
raise
_beginthreadex
?what@exception@@UBEPBDXZ
_Getmonths
_pctype
_snwscanf
_mbsnbset
_mbsninc
_ftol
putchar
_outpd
strcoll
mktime
_wsystem
_kbhit
_strtime
_inpd
_getdrive
__getmainargs
_heapadd
_mbscspn
fscanf
_fpclass
vswprintf
swprintf
fsetpos

user32

EnumDisplayMonitors
UserLpkTabbedTextOut
GetRawInputDeviceInfoW
SetMessageQueue
IsHungAppWindow
EnumWindowStationsA
CreateCursor
ValidateRect
CharUpperW
FillRect
EnumWindows
SetActiveWindow
GetParent
GetNextDlgGroupItem
IsCharLowerW
GetScrollBarInfo
SetClipboardViewer
GetDialogBaseUnits
GetCapture
ReasonCodeNeedsBugID
LookupIconIdFromDirectoryEx
UserRealizePalette
ChangeDisplaySettingsExA
AlignRects
CreateDesktopW
VkKeyScanExW
CharPrevExA
DrawAnimatedRects
GetWindowDC
GetWindowTextLengthW
DispatchMessageA
ShowCaret

ws2help

WahNotifyAllProcesses
WahDisableNonIFSHandleSupport
WahEnumerateHandleContexts
WahCreateSocketHandle
WahCompleteRequest
WahInsertHandleContext
WahCloseNotificationHandleHelper
WahCreateNotificationHandle
WahOpenApcHelper
WahEnableNonIFSHandleSupport
WahCloseHandleHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahCloseSocketHandle
WahRemoveHandleContext
WahReferenceContextByHandle
WahCreateHandleContextTable
WahWaitForNotification
WahQueueUserApc
WahOpenNotificationHandleHelper
WahDestroyHandleContextTable
WahCloseThread
WahCloseApcHelper

kernel32

LocalAlloc
ReadConsoleOutputAttribute
GetGeoInfoA
QueryPerformanceCounter
SetCommBreak
ActivateActCtx
InitializeCriticalSection
lstrcmpiW
LoadLibraryA
lstrlenW
SetHandleContext
VerLanguageNameW
FreeUserPhysicalPages
GetTempPathW
UTUnRegister
GetDiskFreeSpaceW
RegisterWowExec
OpenFileMappingW
GetThreadContext
lstrcpyn
SetConsoleActiveScreenBuffer
InterlockedExchange
PeekNamedPipe
ReadConsoleInputW
SetMailslotInfo
GetCurrentThread
HeapCreate
VirtualAlloc
FindNextFileW
GetVolumePathNamesForVolumeNameW
RemoveLocalAlternateComputerNameA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0a0946ecdb2cc74be770e4a72d5de55

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

ws2help

kernel32

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB