d5440c6f30164b07a782a0f5ac7fc922ff47d3a17daec36b950c7b0c40e71512

Sharing

Copy URL Twitter E-mail

General

Target

d5440c6f30164b07a782a0f5ac7fc922ff47d3a17daec36b950c7b0c40e71512
Size

170KB
MD5

658dd5db43fd205abe59a74651ba6006
SHA1

67cf6714ce7f18500e935639ced17774cad4b279
SHA256

d5440c6f30164b07a782a0f5ac7fc922ff47d3a17daec36b950c7b0c40e71512
SHA512

5062ac05018eb797a753da5547edf31f648601b6329ae5f017747750b428f495be0d32bd3e4d87ac6b9a6fe03d04de875caae78db0104096a873251e1e606514
SSDEEP

3072:u0vz6fYg6J0YbRrdAk4F/JQnrPGjCUwSgvmBsNoySvUxgL9TCDYhUP3UfZVmx0FC:u0L66dbRhZnrICuwm2GhvUm9TCDYhUss

Score

N/A

Malware Config

Signatures

Files

d5440c6f30164b07a782a0f5ac7fc922ff47d3a17daec36b950c7b0c40e71512
.exe windows x86

68af57df7d86746b3e257e9ddea99011

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetStringTypeExW
GetTimeZoneInformation
lstrlenW
SetThreadLocale
GetFileAttributesExA
GetLocaleInfoA
DeleteFileW
CloseHandle
GetVersionExA
GlobalReAlloc
GetSystemTimeAsFileTime
GetExitCodeThread
FindNextChangeNotification
GetFileSize

Exports

Exports

GetOptionOriginal
IsValue
CopyKeyboardExA
GlobalTimerA
InsertPointerW
GenerateObjectExW
FindProviderEx
FormatWidthNew
FreeSystemOriginal
DecrementListOld
InstallPointNew
IsValidDataOriginal
IsKeyboardOld
GlobalMemory
CopyAppNameNew
EnumSemaphoreEx
SendKeyboardEx
ModifyPointerW
KeyNameA
FormatPointerEx
LoadSemaphoreExW
CancelHeightW
CrtList
IsNotAppNameExA
CopyTimerW
DecrementSection
CopyObjectEx
CopyPenOriginal
RtlScreenExW
IsNotTextNew
KeyNameExA
CallListExW

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Eh0887
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nus
Size: 512B - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 1024B - Virtual size: 519B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68af57df7d86746b3e257e9ddea99011

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 134KB

.On59 Size: 512B - Virtual size: 398B

.Eh0887 Size: 512B - Virtual size: 28B

.Nus Size: 512B - Virtual size: 165B

.Re82 Size: 23KB - Virtual size: 26KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 1024B - Virtual size: 519B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 164B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 135KB - Virtual size: 134KB

.On59
Size: 512B - Virtual size: 398B

.Eh0887
Size: 512B - Virtual size: 28B

.Nus
Size: 512B - Virtual size: 165B

.Re82
Size: 23KB - Virtual size: 26KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 1024B - Virtual size: 519B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 164B

.reloc
Size: 5KB - Virtual size: 4KB