dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e

Sharing

Copy URL

Twitter E-mail

General

Target

dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
Size

220KB
MD5

6e367f79530e116bab9aaa133fb36da6
SHA1

04a670221645d772fdf58c8a04790d1deae6731c
SHA256

dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
SHA512

bba7c9f6681bc1cca92a65a6b76b6eb2ecb63071c24963420bcb0573bc45b30e82d4964f09058976bc08f9a4623489fa580f750303f471c95e0f0a2e9571481b
SSDEEP

3072:dEun/n3SOkL8OO5yzgqwBZzBn5QXQl8lLGZcnF/jP7pqXcaE+d/MbvmVOd:dEGn3pkL9ZsqwBZVLKF/HpqM0//Vc

Score

N/A

Malware Config

Signatures

Files

dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
.exe windows x86

be2abc538e938036beacdea983d78065

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

usp10

ScriptIsComplex
ScriptItemize
ScriptGetLogicalWidths
ScriptLayout
ScriptPlace
ScriptRecordDigitSubstitution
ScriptJustify
ScriptGetProperties

kernel32

GetProcAddress
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThread
DuplicateHandle
PeekNamedPipe
GetEnvironmentVariableA
FindFirstChangeNotificationA
OpenMutexA
CreateMutexA
ReleaseMutex
SetEvent
WaitForSingleObject
LoadLibraryA
HeapWalk
HeapReAlloc
GetLocalTime
CreateFileA
HeapFree
HeapAlloc
CreateDirectoryA
DeleteFileA
ResetEvent
VirtualFree
VirtualAlloc
GetProfileStringW
VirtualProtect
BeginUpdateResourceA
GetModuleHandleA
GetSystemInfo
ExpandEnvironmentStringsA
GetVolumeInformationA
GetSystemTimeAsFileTime
GetStartupInfoW
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapDestroy
HeapCreate
IsBadWritePtr
GetLastError
CloseHandle
WriteFile
SetFilePointer
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetEndOfFile
ReadFile
HeapSize
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be2abc538e938036beacdea983d78065

Headers

File Characteristics

Imports

user32

usp10

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 72KB - Virtual size: 418KB

.rsrc Size: 4KB - Virtual size: 880B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 72KB - Virtual size: 418KB

.rsrc
Size: 4KB - Virtual size: 880B