9e92b452547629afab0dc4e332851b5cd5d4e8f692c09f96afeec152c656fccb

Sharing

Copy URL Twitter E-mail

General

Target

9e92b452547629afab0dc4e332851b5cd5d4e8f692c09f96afeec152c656fccb
Size

228KB
MD5

565a276670ed9c0838c9c06cf5bbe70f
SHA1

7a0fa91ae1b4a9aceef6aeda57d921225c4b969d
SHA256

9e92b452547629afab0dc4e332851b5cd5d4e8f692c09f96afeec152c656fccb
SHA512

ba63a905753ecaf09a6c9293a1ca8c0d0426cbd91e87edda9c60f88a75c0d4ba5a01a1314fb1e00260dc31d7526920a4ed39be059ed099141a44f89e525d0f43
SSDEEP

6144:EJ8E3axUGrXbQ30QwXds53gc1o25LF05uwNlq0:EbOU6rQ30QwXdncO25LF05nf

Score

N/A

Malware Config

Signatures

Files

9e92b452547629afab0dc4e332851b5cd5d4e8f692c09f96afeec152c656fccb
.exe windows x86

a0d49169238dd69f46b3a6a9cd861f44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
HeapSize
ReadFile
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
VirtualQuery
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
OpenProcess
WaitForSingleObject
TerminateProcess
GetModuleFileNameA
CreateProcessA
GetLastError
CloseHandle
Sleep
GetExitCodeProcess
SetEndOfFile
MultiByteToWideChar
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
GetProcAddress
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
LCMapStringA
LCMapStringW
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
RtlUnwind

user32

EnumWindows
GetWindowThreadProcessId
PostMessageA
DialogBoxParamA
BeginPaint
LoadBitmapA
EndPaint
GetDlgItem
EnableWindow
EndDialog
MessageBoxA

gdi32

DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject

advapi32

RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0d49169238dd69f46b3a6a9cd861f44

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 172KB - Virtual size: 175KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 172KB - Virtual size: 175KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 2KB