c91b0d62aaa7db17c964e88db0eb67787227b47c864ffed670571189efb6f9d5

Sharing

Copy URL Twitter E-mail

General

Target

c91b0d62aaa7db17c964e88db0eb67787227b47c864ffed670571189efb6f9d5
Size

247KB
MD5

391ed4051bdf2de500260078d707b640
SHA1

dafeb5252b71a9dcdbe2567ad488ed5a2d5bc538
SHA256

c91b0d62aaa7db17c964e88db0eb67787227b47c864ffed670571189efb6f9d5
SHA512

392c99e15e3f87347075a1afe5c0b6fca0711c9a0e7ade05ca46822ca41ef90e8969381b6cc385e8c89077c9a09b538957e96fe1d4f982d1132346180d1a624a
SSDEEP

6144:NWDeEWi3pxHd3JJwPzrz/avrYn4LgIopZJWGbaWWSVx1vx1L:NCeEn3vHdZUzrz/uYn4LgIobT1vx1L

Score

N/A

Malware Config

Signatures

Files

c91b0d62aaa7db17c964e88db0eb67787227b47c864ffed670571189efb6f9d5
.exe windows x86

dd3864519a42eb7778db06adc6af01a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenMutexA
GetConsoleScreenBufferInfo
SetConsoleWindowInfo
GetModuleHandleA
CloseHandle
LocalFree
SetStdHandle
WriteConsoleW
SetFilePointer
IsProcessorFeaturePresent
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
LCMapStringW
MultiByteToWideChar
LoadLibraryA
WriteFile
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStringTypeW
IsValidCodePage
GetOEMCP
GetProcAddress
GetLastError
GetStdHandle
ReadFile
RtlUnwind
GlobalAlloc
GetACP
GetCPInfo
GetTickCount
WaitForSingleObject
GetCurrentProcess
HeapAlloc
lstrlenA
Sleep
CreateFileA
CreateFileW
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetModuleFileNameW
EncodePointer
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
TlsAlloc
TlsGetValue

user32

GetWindow
GetWindowThreadProcessId
CopyRect
SetDlgItemTextA
GetDlgItemTextA
DestroyWindow
GetDlgItemInt
GetWindowRect
SendDlgItemMessageA
IsIconic
LoadBitmapA
GetParent
LoadMenuA
GetClientRect
SetFocus
GetDC
IsDialogMessageA
ChildWindowFromPoint
GetMenu
GetGUIThreadInfo
OffsetRect
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
DefWindowProcA
GetDesktopWindow
GetSysColor
SetWindowPos
CheckDlgButton
IsDlgButtonChecked
WindowFromDC
GetMenuItemCount
PostMessageA
FindWindowA
GetDlgCtrlID

gdi32

SetPixel
SelectObject
CreatePen
GetStockObject
MoveToEx

winspool.drv

ClosePrinter
EndPagePrinter

advapi32

GetSecurityInfo
LookupAccountSidA
RegOpenKeyExW

ws2_32

WSAStartup
gethostname

mpr

WNetGetUniversalNameA
WNetEnumResourceA
WNetCloseEnum

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 162KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd3864519a42eb7778db06adc6af01a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ws2_32

mpr

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 162KB - Virtual size: 185KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 162KB - Virtual size: 185KB

.rsrc
Size: 1KB - Virtual size: 1KB