b7e87809b0663641ed7310b1ebd78e1bf5dff9883afac555220678e248b37e30

Sharing

Copy URL Twitter E-mail

General

Target

b7e87809b0663641ed7310b1ebd78e1bf5dff9883afac555220678e248b37e30
Size

159KB
MD5

927ed2bbf78c7e919ecc93ae1d6db054
SHA1

d4d29622f50da113dbd9006f16829ecd7fd40350
SHA256

b7e87809b0663641ed7310b1ebd78e1bf5dff9883afac555220678e248b37e30
SHA512

76c721b3038ff61d777ae4708e44448132323c5f2f171f3cdbc7c27cf98bfd72b237e25102b9d5e748e83f5e397baab4bd96b0d9b27ba3f07f2d425fb8b1c008
SSDEEP

3072:wRYDYpBWg/JYJzsWjbcxnnjPKVoILWk9V84E9GdA9m76osdXMB1j8VjDj:/EbWg/JYJxYxnnyWq84EMdAs76oU2qj3

Score

N/A

Malware Config

Signatures

Files

b7e87809b0663641ed7310b1ebd78e1bf5dff9883afac555220678e248b37e30
.exe windows x86

897e8f7461fa832720c0d337ee2a5ea7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFlags
FreeLibrary
OutputDebugStringA
GlobalFree
SetConsoleMode
DeleteTimerQueueEx
ReadConsoleOutputW
GetSystemDefaultUILanguage
WriteFileEx
SetConsoleCursorInfo
SetErrorMode
FindVolumeClose
GetTimeFormatW
DnsHostnameToComputerNameA
lstrcmpiA
GetModuleHandleA
CreateMutexW
GetProcessVersion
ExpandEnvironmentStringsA
GetEnvironmentStringsA
DosDateTimeToFileTime
SystemTimeToFileTime
GetLocaleInfoA
SetComputerNameExA
RegisterWaitForSingleObject
_hread
GetEnvironmentVariableA
GetModuleHandleW
CreateProcessA
SetProcessWorkingSetSize
WideCharToMultiByte
FreeEnvironmentStringsW
SetThreadAffinityMask
GetConsoleWindow
GlobalCompact
GetConsoleDisplayMode
GetShortPathNameA
EnumUILanguagesA
GetWindowsDirectoryA
UnmapViewOfFile
FreeResource
GetComputerNameExA
CreateWaitableTimerW
FatalAppExitA
EnumSystemLanguageGroupsA
SetSystemTime
Beep
QueryPerformanceCounter
RaiseException
GetDiskFreeSpaceExW
WriteConsoleOutputW
WritePrivateProfileStringA
PulseEvent
SetFileApisToOEM
GetCommState
LocalCompact
EnumTimeFormatsW
ReleaseSemaphore
LocalFlags
GetStartupInfoA
VerifyVersionInfoA
SetThreadContext
CreateFileMappingW
GetProcessPriorityBoost
GetFileInformationByHandle
SetHandleInformation
GetCalendarInfoW
_llseek
GetLogicalDriveStringsW
EnumCalendarInfoA
GetProcessTimes

msvcrt

wcsstr
_mbslen
mktime
_aligned_malloc
_ui64toa
_wcreat
_ismbbkana
_ismbcupper
_ismbcprint
ftell
_popen
isprint
cos
ungetc
putc
_ctype
_wspawnvpe
__set_app_type
time
calloc
_controlfp
_wchmod
wcstol
_strcmpi
_chmod
_initterm
_wcsncoll
_inpw
_fstat
_mbsnicmp
_getdllprocaddr
exit
_acmdln
_wspawnvp
_strset
_set_error_mode
__setusermatherr
_mbsncmp
_hypot
_execle
_wmakepath
_wcsrev
_filelengthi64
__p__fmode
_atoldbl
setvbuf
_wctime
system
_wtoi64
_mbschr
_exit
_XcptFilter
_adjust_fdiv
_heapchk
_heapmin
_adj_fdivr_m64
_read
_scprintf
_cabs
_aligned_free
_inpd
_close
_lock
__p__commode
_mbsncoll
isxdigit
__getmainargs
_except_handler3
gmtime
_wfdopen
_i64toa
_execvpe
_vsnwprintf
_wtmpnam
_lrotr

user32

DdeCreateStringHandleA
ActivateKeyboardLayout
DefMDIChildProcA
EndTask
DdeConnectList
GetParent
DialogBoxParamA
CloseDesktop
PtInRect
CallNextHookEx
GetWindowLongW
CallWindowProcW
IsWindowVisible
FillRect
IntersectRect
DdeDisconnectList
CheckRadioButton
SwitchToThisWindow
CreateIconIndirect
LoadIconW
GetClipboardData
TileChildWindows
DeferWindowPos
DrawFrameControl
GetPropW
CreateDialogIndirectParamA
IsChild
LookupIconIdFromDirectoryEx
GetMenuState
SetWindowContextHelpId
IsCharLowerW
CreateMDIWindowA
GetDoubleClickTime
GetTitleBarInfo
LoadIconA
CreateDialogParamA
HiliteMenuItem
LoadKeyboardLayoutW
RegisterClassA
GetShellWindow
GetNextDlgTabItem
GetQueueStatus
InvalidateRgn
DestroyAcceleratorTable
CharNextW
SetClipboardData
VkKeyScanW
RemoveMenu
SetWindowsHookA
DeregisterShellHookWindow
LoadMenuIndirectW
PeekMessageW
GetComboBoxInfo
ReplyMessage
CallMsgFilterA
MapWindowPoints

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

897e8f7461fa832720c0d337ee2a5ea7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 67KB - Virtual size: 67KB

.data Size: 512B - Virtual size: 76KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 67KB - Virtual size: 67KB

.data
Size: 512B - Virtual size: 76KB

.rsrc
Size: 10KB - Virtual size: 9KB