fab1ed3d6e0d43a49f29966581aa57bb1e25cad64137ae98f933afd6ba3c097b

Sharing

Copy URL Twitter E-mail

General

Target

fab1ed3d6e0d43a49f29966581aa57bb1e25cad64137ae98f933afd6ba3c097b
Size

458KB
MD5

df61165d5356977efd2a944f5250c1ed
SHA1

ab47fa9cf7f348e0d78657ede4356bde003d4e8f
SHA256

fab1ed3d6e0d43a49f29966581aa57bb1e25cad64137ae98f933afd6ba3c097b
SHA512

18c2023f276fd1b3dc5e7ecaa44bc5680507f912d1e119fbd068bd1de1862f6e99b943cf79ae8eed535ae53cb69df4f8a2257f9c9f3d6ae6ce8b5b7e36db00a8
SSDEEP

12288:/+xANmfHYWSQpwVB5M6fny0tlQKV/cRs:4BZ6Vbxy0tWKR

Score

N/A

Malware Config

Signatures

Files

fab1ed3d6e0d43a49f29966581aa57bb1e25cad64137ae98f933afd6ba3c097b
.exe windows x86

3b3324790effbfa4135ad5300737ddbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

EndDoc
SetMagicColors
RemoveFontResourceA
CreatePolygonRgn
CreateDIBPatternBrushPt
GetNearestColor
GetRegionData
GetCurrentPositionEx
CreateColorSpaceA
GetFontData
GetKerningPairsA
EnumEnhMetaFile

kernel32

MultiByteToWideChar
GetLocaleInfoA
FreeEnvironmentStringsA
CompareStringW
GetStartupInfoA
GetModuleFileNameA
GetACP
GetModuleHandleA
TlsAlloc
HeapCreate
GetVersionExA
GetModuleFileNameW
LoadLibraryA
GetTickCount
LCMapStringW
GetStdHandle
WideCharToMultiByte
VirtualAlloc
GetCommandLineW
GetUserDefaultLCID
InitializeCriticalSection
LCMapStringA
ExitProcess
IsValidLocale
GetStringTypeW
HeapReAlloc
VirtualProtect
GetFileType
SetHandleCount
TlsFree
GetCPInfo
GetLastError
TlsSetValue
TlsGetValue
GetEnvironmentStrings
HeapFree
GetLocaleInfoW
HeapAlloc
InterlockedExchange
GetTimeZoneInformation
GetProcAddress
CompareStringA
IsValidCodePage
GetCurrentProcess
FreeEnvironmentStringsW
SetLastError
EnumSystemLocalesA
GetCurrentThreadId
GetSystemInfo
GetStartupInfoW
GetOEMCP
RtlUnwind
GetDateFormatA
LeaveCriticalSection
GetStringTypeA
GetCurrentThread
IsBadWritePtr
GetEnvironmentStringsW
HeapSize
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
EnterCriticalSection
HeapDestroy
SetPriorityClass
DeleteCriticalSection
SetEnvironmentVariableA
GetCommandLineA
GetSystemTimeAsFileTime
WriteFile
TerminateProcess
UnhandledExceptionFilter
VirtualQuery
GetTimeFormatA

wininet

InternetConnectW

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b3324790effbfa4135ad5300737ddbb

Headers

File Characteristics

Imports

gdi32

kernel32

wininet

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 7KB - Virtual size: 35KB

.data Size: 320KB - Virtual size: 320KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 7KB - Virtual size: 35KB

.data
Size: 320KB - Virtual size: 320KB

.rsrc
Size: 15KB - Virtual size: 15KB