bce3f19c0d53e1f2ddfd8f47d90e49d38fd320062fc494973a7a33605dae9e4b

Sharing

Copy URL Twitter E-mail

General

Target

bce3f19c0d53e1f2ddfd8f47d90e49d38fd320062fc494973a7a33605dae9e4b
Size

267KB
MD5

9e2e1bedfa77c636208c56947b3d888e
SHA1

5a3d0629c63eac9550a07acec5355bbbe510cf24
SHA256

bce3f19c0d53e1f2ddfd8f47d90e49d38fd320062fc494973a7a33605dae9e4b
SHA512

c4dc35e9d249def281037676ac36f473ac9a7de2aec27039681e7d04429e241bf9b6ecd85223a7339e246f43b66d074d53edf6e1407d868fc7dba16531084d76
SSDEEP

6144:bixtzZleXKkF+L+BfSuz4EpHsPetzNDFXbVRuE5WKN2:+xtzDeb+5ucNCDFrV55ho

Score

N/A

Malware Config

Signatures

Files

bce3f19c0d53e1f2ddfd8f47d90e49d38fd320062fc494973a7a33605dae9e4b
.exe windows x86

fce2a9447ca51ca16c169fa6f3a1f95b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetExitCodeProcess
CreateFileW
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
WriteConsoleW
CreateProcessA
MultiByteToWideChar
LCMapStringW
HeapSize
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileAttributesA
CompareStringW
LocalFree
GetLocalTime
CloseHandle
lstrlenW
GlobalFree
HeapCreate
GetCurrentProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetLastError
CreatePipe
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
Sleep
EncodePointer
SetStdHandle
RtlUnwind
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetEnvironmentVariableA

user32

EndPaint
DestroyWindow
GetMessageA
SendDlgItemMessageA
SetCapture
LoadMenuA
GetClientRect
SetFocus
GetWindowTextLengthA
SendMessageA
BeginPaint
TranslateMessage
GetWindowTextW
GetDlgItem
ShowWindow
DispatchMessageA
MessageBoxW
LoadCursorA
DialogBoxParamA
GetScrollPos
RegisterClassA

gdi32

SetBkMode
DeleteObject
SelectObject
TextOutW
CreateFontIndirectA

comdlg32

PrintDlgA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fce2a9447ca51ca16c169fa6f3a1f95b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 176KB - Virtual size: 183KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 176KB - Virtual size: 183KB

.rsrc
Size: 512B - Virtual size: 436B