5135529a4f3b46c73c2b5467e1e666940d016d4560ccd211bac919f273b7db65

Sharing

Copy URL Twitter E-mail

General

Target

5135529a4f3b46c73c2b5467e1e666940d016d4560ccd211bac919f273b7db65
Size

334KB
MD5

072604b9da332321364b40d785b7fa30
SHA1

c4700282527620b60209b583795d4702569b84fd
SHA256

5135529a4f3b46c73c2b5467e1e666940d016d4560ccd211bac919f273b7db65
SHA512

eb02d02021a6b2388f6b8d9fb2efdbc4fa52510df28a3b295e59f36b65d3344ff4631da3c95698b758e99a7056bc210fede6ac95081ccd5713b58e080af796d4
SSDEEP

6144:iXw60IQ+rKdn8k5656Ud0UevMV3XQW0cO95hBwwZFDqqDSdZ10u+qDunstJxR:q0INm9BaDd0UevMV3XUhLXDn6ZuWDjHT

Score

N/A

Malware Config

Signatures

Files

5135529a4f3b46c73c2b5467e1e666940d016d4560ccd211bac919f273b7db65
.exe windows x86

7579739beed8cdcae6b3468006ca66cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
SetFilePointer
LoadLibraryW
Sleep
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
HeapSize
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
SetStdHandle
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapReAlloc
LocalFree
CloseHandle
WaitForMultipleObjects
WriteConsoleA
GetLastError
GetStdHandle
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
FreeEnvironmentStringsW
FlushFileBuffers
MultiByteToWideChar
LCMapStringW
FormatMessageA
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentProcess
QueryPerformanceCounter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
WideCharToMultiByte
CreateFileW

user32

SetDlgItemTextA
SetWindowTextW
SendDlgItemMessageA
RegisterWindowMessageW
GetParent
LoadMenuA
LoadIconA
CallNextHookEx
EnumWindows
GetDC
GetAncestor
GetWindowTextW
GetDlgItemTextA
IsWindowUnicode
ReleaseDC
EndDialog
SendDlgItemMessageW
GetSysColor
LoadStringW
LoadAcceleratorsA
SetMenu
IsDlgButtonChecked
GetActiveWindow
IsWindowVisible
SendMessageW
EnableWindow

gdi32

SetBkMode
SetBkColor
StretchDIBits
SetTextColor

advapi32

GetTokenInformation
EqualSid
AllocateAndInitializeSid
FreeSid
OpenProcessToken

shell32

ord2

ole32

RegisterDragDrop

winmm

timeBeginPeriod

iphlpapi

GetTcpStatistics

shlwapi

StrTrimA

comctl32

ord410

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7579739beed8cdcae6b3468006ca66cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

iphlpapi

shlwapi

comctl32

Sections

.text Size: 301KB - Virtual size: 301KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 6KB - Virtual size: 18KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 301KB - Virtual size: 301KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 6KB - Virtual size: 18KB

.rsrc
Size: 8KB - Virtual size: 8KB