b6dc6c0e2e719b440822eaa253cb8eace5a64a09e25f83b639693a333553882f

Sharing

Copy URL Twitter E-mail

General

Target

b6dc6c0e2e719b440822eaa253cb8eace5a64a09e25f83b639693a333553882f
Size

203KB
MD5

42befbe2475e4a5537c5579c4994ac76
SHA1

667b63b83db8ea82cf6ab9476c108016e7da60e8
SHA256

b6dc6c0e2e719b440822eaa253cb8eace5a64a09e25f83b639693a333553882f
SHA512

50966370a52a89ccb9f906bdd6439b1576ade2a6e26a9b6b8a1fc4d4aaef70ac50235ef8107c99d33a680ed286a85427cca55eade92c416fad7984a7ca5f5d39
SSDEEP

3072:tFgDEYEfiinaNSc2Pe4LJoRNU7xh8yOXbGRRAHPsxhO9EpTYSaipdX5bHN:HgDEYEfikUQKGRas/veipdpbH

Score

N/A

Malware Config

Signatures

Files

b6dc6c0e2e719b440822eaa253cb8eace5a64a09e25f83b639693a333553882f
.exe windows x86

5563c094cab58615e630c352b02c72c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColor
MessageBoxA
GetScrollInfo
SetScrollInfo
IsWindow
CallWindowProcA
SetMenuItemInfoA
LoadIconA
CreateWindowExA

ole32

CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
OleSetContainedObject

advapi32

GetUserNameA

loadperf

LoadPerfCounterTextStringsA
UpdatePerfNameFilesA

kernel32

EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
GetProcessHeap
SetEndOfFile
IsValidLocale
CreateFileW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetStringTypeW
GetModuleHandleW
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
GetProfileStringW
VirtualProtect
BeginUpdateResourceA
LoadLibraryExA
GetNativeSystemInfo
GetDriveTypeA
GetVolumeInformationA
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetShortPathNameA
GetEnvironmentVariableA
ResetEvent
FindFirstChangeNotificationA
DeleteFileA
OpenMutexA
CreateMutexA
FlushFileBuffers
CreateThread
LocalFree
LocalAlloc
CloseHandle
ReadFile
GetFileSize
SetFilePointer
CreateFileA
DeleteCriticalSection
CreateProcessA
GetFileAttributesA
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FatalAppExitA
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
SetStdHandle
Sleep

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5563c094cab58615e630c352b02c72c5

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

loadperf

kernel32

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 50KB - Virtual size: 319KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 50KB - Virtual size: 319KB

.rsrc
Size: 2KB - Virtual size: 1KB