dc66bbeaf4e1f583cfe967aec6fed630d9d4ed8cb2814f13846adfbb906aab4d

Sharing

Copy URL Twitter E-mail

General

Target

dc66bbeaf4e1f583cfe967aec6fed630d9d4ed8cb2814f13846adfbb906aab4d
Size

60KB
MD5

6d5fa94da8fe4ae0556a4562bbab9956
SHA1

b2594be44957d5e61a2f708cb7d51a14b6f4ca05
SHA256

dc66bbeaf4e1f583cfe967aec6fed630d9d4ed8cb2814f13846adfbb906aab4d
SHA512

aa499f3ae96e85b1c6fd42b4f1a932c629a5114945bf536bbf7e6ea5f8a883df9ec426ebb0600d19936003cf15dbc3edb6a8cf772595df260e64109ccdc4c5ff
SSDEEP

768:b0aXbsFBTVak8ydJyrF8/oY5Ml2FQpvmbnZ4cEDQPDmFwkidQ:bDXbsPTVQE7/y2FJD6NuDXfdQ

Score

N/A

Malware Config

Signatures

Files

dc66bbeaf4e1f583cfe967aec6fed630d9d4ed8cb2814f13846adfbb906aab4d
.exe windows x86

9e86ca4ed1166b15b4b5aa19a715ba9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginDeferWindowPos
DeleteMenu
EndDeferWindowPos
GetClassInfoA
IsRectEmpty
GetKeyboardLayoutList

msi

ord229

kernel32

WaitForSingleObject
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcAddress
IsBadWritePtr
VirtualAlloc
HeapAlloc
GetACP
GetStdHandle
GetModuleHandleA
lstrcmpA
CreateMutexA
GetPriorityClass
GetEnvironmentStringsW
FindClose
TlsFree
InterlockedExchange
HeapSize
CreateFileA
SetHandleCount
WaitForSingleObjectEx
GetCommandLineW
GetModuleFileNameA
GetModuleHandleW
LoadLibraryW
TryEnterCriticalSection
EnterCriticalSection
GetCPInfo
HeapFree
LoadLibraryA
DeleteCriticalSection
FreeLibraryAndExitThread
GetCurrentProcess
ReadFile
GetOEMCP
LoadResource
InitializeCriticalSectionAndSpinCount
ExitProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeW
HeapCreate
HeapReAlloc
FlushFileBuffers
GetCurrentProcessId
GetCommandLineA
GetEnvironmentStrings
CreateEventA
GetVersionExA
IsDebuggerPresent
GetStartupInfoA
GetVersion
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
LeaveCriticalSection
FatalAppExitA

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 4KB - Virtual size: 735B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e86ca4ed1166b15b4b5aa19a715ba9e

Headers

File Characteristics

Imports

user32

msi

kernel32

Sections

.text Size: 20KB - Virtual size: 17KB

.code Size: 4KB - Virtual size: 735B

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 20KB - Virtual size: 54KB

.rsrc Size: 4KB - Virtual size: 752B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 17KB

.code
Size: 4KB - Virtual size: 735B

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 20KB - Virtual size: 54KB

.rsrc
Size: 4KB - Virtual size: 752B

.reloc
Size: 4KB - Virtual size: 1KB