b12ba99b1a74ab8da3dfd46bb23494bfabfcaa2f5914fc97bb2b7694a53677cf

Sharing

Copy URL Twitter E-mail

General

Target

b12ba99b1a74ab8da3dfd46bb23494bfabfcaa2f5914fc97bb2b7694a53677cf
Size

267KB
MD5

0d5cfed72d75786075ec3f5b157d0828
SHA1

0b2545222733e9353005a9d793ad46c59cdb139d
SHA256

b12ba99b1a74ab8da3dfd46bb23494bfabfcaa2f5914fc97bb2b7694a53677cf
SHA512

cbd981ef9487d77852100902505126f316501688b177be2dd45e1a3fd0f18bc2e889a491f6fa56f449ba56aa6de3f479ddd47966613b44043fa060b31ac01ed6
SSDEEP

6144:bixtzZleXDlkF+L+BfSuz4EpHsPetzNDFXbVRuE5WKN2:+xtzDew+5ucNCDFrV55ho

Score

N/A

Malware Config

Signatures

Files

b12ba99b1a74ab8da3dfd46bb23494bfabfcaa2f5914fc97bb2b7694a53677cf
.exe windows x86

fce2a9447ca51ca16c169fa6f3a1f95b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetExitCodeProcess
CreateFileW
ReadFile
GetProcessHeap
SetEndOfFile
SetFilePointer
WriteConsoleW
CreateProcessA
MultiByteToWideChar
LCMapStringW
HeapSize
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileAttributesA
CompareStringW
LocalFree
GetLocalTime
CloseHandle
lstrlenW
GlobalFree
HeapCreate
GetCurrentProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetLastError
CreatePipe
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
Sleep
EncodePointer
SetStdHandle
RtlUnwind
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetEnvironmentVariableA

user32

EndPaint
DestroyWindow
GetMessageA
SendDlgItemMessageA
SetCapture
LoadMenuA
GetClientRect
SetFocus
GetWindowTextLengthA
SendMessageA
BeginPaint
TranslateMessage
GetWindowTextW
GetDlgItem
ShowWindow
DispatchMessageA
MessageBoxW
LoadCursorA
DialogBoxParamA
GetScrollPos
RegisterClassA

gdi32

SetBkMode
DeleteObject
SelectObject
TextOutW
CreateFontIndirectA

comdlg32

PrintDlgA

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fce2a9447ca51ca16c169fa6f3a1f95b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 176KB - Virtual size: 183KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 176KB - Virtual size: 183KB

.rsrc
Size: 512B - Virtual size: 436B