9bb0cf9fedd053522937b202665e0ff76ee5127955f2349b7be2ecc215008e83

Sharing

Copy URL

Twitter E-mail

General

Target

9bb0cf9fedd053522937b202665e0ff76ee5127955f2349b7be2ecc215008e83
Size

249KB
MD5

00c84ab4ee87778daaec3b2a9e24037c
SHA1

08a558bb7b68de0bcbfc0cdf1e156d2a9b509870
SHA256

9bb0cf9fedd053522937b202665e0ff76ee5127955f2349b7be2ecc215008e83
SHA512

aa884e6e977def828991643006b5898d7c76943a08ec558b9b70cf1daf4e9d2a8bbbfed6c96d6d4f20716a7b940d9eb626f90e9bbc68e99c330f4f4e6246e0a6
SSDEEP

6144:lzxDEnj5NJBVAtdHjD2VlwViKMeyoghOdlZoYC:l1QnjrJBVUDslw8s+hOXZoYC

Score

N/A

Malware Config

Signatures

Files

9bb0cf9fedd053522937b202665e0ff76ee5127955f2349b7be2ecc215008e83
.exe windows x86

c53ead9ecaabb6de414ae7935a947137

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
MultiByteToWideChar
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetLastError
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleW
SetStdHandle
lstrcpyA
LoadLibraryA
CloseHandle
SetHandleCount
GetProcAddress
SetThreadPriority
CreateFileW
GetFileAttributesW
GetCurrentThread
GetCurrentProcess
HeapAlloc
EnterCriticalSection
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetModuleFileNameA
HeapFree
HeapSize
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue

user32

MoveWindow
PostQuitMessage
IsZoomed
LoadBitmapA
LoadMenuA
GetClientRect
SendMessageA
GetDC
GetMenu
InvalidateRect
ReleaseDC
GetDlgItem
ScrollWindow
DefWindowProcA
RedrawWindow
GetSysColor
CreatePopupMenu
WindowFromDC
AppendMenuA
IsWindow
GetSystemMetrics
IsWindowVisible
CloseWindow
UpdateWindow
SetScrollInfo
GetScrollPos
GetWindow

gdi32

SetWindowOrgEx
BitBlt
ExtFloodFill
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
GetTextMetricsA
CreateSolidBrush
MoveToEx

comdlg32

GetFileTitleW

ws2_32

WSAStartup

comctl32

ord17

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c53ead9ecaabb6de414ae7935a947137

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ws2_32

comctl32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 156KB - Virtual size: 186KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 156KB - Virtual size: 186KB

.rsrc
Size: 1KB - Virtual size: 1KB