eb699b10f44c06523829f76d3d83cf15f1576b0d5795bbc4c4336d2b7cbd0969

Sharing

Copy URL Twitter E-mail

General

Target

eb699b10f44c06523829f76d3d83cf15f1576b0d5795bbc4c4336d2b7cbd0969
Size

289KB
MD5

d53fc4bc4ccc6a33a0c27c7474cbd7ca
SHA1

b4850812f10eef36c4fc70632d7240082d8d4d44
SHA256

eb699b10f44c06523829f76d3d83cf15f1576b0d5795bbc4c4336d2b7cbd0969
SHA512

0a4a25ce8b84840b2a30bcb9a1653a8054d37954e3316db80a839b7b01d70b26861a6452ed48275e8b8ceb0cf4ac2068542ba1a3d44df65720d776196cac2ee0
SSDEEP

6144:uMap6JdkbZ402ZEgDv/n2OOMxZ6aqAVzFWHEqPwUQLNp:uZ6J+Z402ZD9OMTNZzFXwwU8v

Score

N/A

Malware Config

Signatures

Files

eb699b10f44c06523829f76d3d83cf15f1576b0d5795bbc4c4336d2b7cbd0969
.exe windows x86

d8810d3591bc567573bc358c2b544887

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
SetStdHandle
WriteConsoleW
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LoadLibraryW
GetConsoleMode
GetConsoleCP
HeapReAlloc
CloseHandle
CreateFileMappingA
SetLastError
GetLastError
lstrlenW
LCMapStringW
HeapCreate
GetCurrentProcess
HeapAlloc
UnmapViewOfFile
MapViewOfFile
HeapSize
FlushFileBuffers
CreateFileA
RtlUnwind
IsValidCodePage
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsProcessorFeaturePresent
Sleep
GetCPInfo
GetACP
GetOEMCP

user32

GetParent
GetDC
LoadIconW
IntersectRect
InvalidateRect
CreateWindowExA
CharUpperW
GetSysColor
LoadStringW
GetSysColorBrush
IsWindow
GetSystemMetrics
SendMessageW
FindWindowA
ReleaseDC

gdi32

GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectW
SetBkColor
GdiFlush
SelectObject
GetStockObject
GetLayout

shell32

ord100

crypt32

CryptVerifyDetachedMessageSignature

shlwapi

StrToIntA

Sections

.text
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8810d3591bc567573bc358c2b544887

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

crypt32

shlwapi

Sections

.text Size: 250KB - Virtual size: 250KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 6KB - Virtual size: 26KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 250KB - Virtual size: 250KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 6KB - Virtual size: 26KB

.rsrc
Size: 17KB - Virtual size: 16KB