e9c66ebd8749bf5f08d7701b7e5028856b968c033fa6974518d872d6dbd32b7a

Sharing

Copy URL

Twitter E-mail

General

Target

e9c66ebd8749bf5f08d7701b7e5028856b968c033fa6974518d872d6dbd32b7a
Size

448KB
MD5

97be23feea6ca947a77de4b379f04782
SHA1

2fedc9e56080c93619e8b6ed1f979f3f05521a2d
SHA256

e9c66ebd8749bf5f08d7701b7e5028856b968c033fa6974518d872d6dbd32b7a
SHA512

28d798d21f2920e7e7e0b9b6eaeede934761610baf31986e8ad9147e6232158676a9483dfef19552e766f9bdc3174d3fc870ffd4337f4a8ceb811795530e2bec
SSDEEP

12288:sx5v1haGVu50uiA8ochvvC9WtROzjmrv+R:S5vPaGVq0ui3LnCILO+z+R

Score

N/A

Malware Config

Signatures

Files

e9c66ebd8749bf5f08d7701b7e5028856b968c033fa6974518d872d6dbd32b7a
.exe windows x86

6807922a44f5333b1214cbb5bbc02f61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
LoadImageA
LoadStringA
SendMessageA

msvfw32

ICDraw
ICSendMessage

crypt32

CertEnumCTLContextProperties
CryptMsgClose
CertEnumSystemStore

winmm

joyGetDevCapsA

kernel32

GetTickCount
Sleep
GetLastError
GetProcAddress
VirtualAlloc
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
RaiseException
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6807922a44f5333b1214cbb5bbc02f61

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvfw32

crypt32

winmm

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 283KB - Virtual size: 283KB

.data Size: 10KB - Virtual size: 528KB

.rsrc Size: 114KB - Virtual size: 114KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 283KB - Virtual size: 283KB

.data
Size: 10KB - Virtual size: 528KB

.rsrc
Size: 114KB - Virtual size: 114KB