bab4e5668840ffd773b3b80aa01f10115c4fb07d0ec13a13592d10f6cc018ca2

Sharing

Copy URL Twitter E-mail

General

Target

bab4e5668840ffd773b3b80aa01f10115c4fb07d0ec13a13592d10f6cc018ca2
Size

54KB
MD5

9ac56d2a1dff6ce8445a695130a611e7
SHA1

854b9143b418183b4b4ae6ba0bf3a219d9a93f7f
SHA256

bab4e5668840ffd773b3b80aa01f10115c4fb07d0ec13a13592d10f6cc018ca2
SHA512

0366db9c99976436ed0c37aee51b28b2ab23ae45eeaa2a50a82544586815a21f3294266b56442fd239320bab81eb15c97aed131f8f61b7e977a0ec3573fef5bb
SSDEEP

768:ZV71IKRTYO3BDeX/YgCwGTMU/MXEuJvpxxsDaQu5AZo/N5mwD49l5Zd5PnLeY3sA:ZfR/D2Bv2gzJBxxsDaQNCpU9Pz5PLrl

Score

N/A

Malware Config

Signatures

Files

bab4e5668840ffd773b3b80aa01f10115c4fb07d0ec13a13592d10f6cc018ca2
.exe windows x86

3a94bb372cbcf761aac83f4e96d96a88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
GetSysColor
SetCursor
CheckDlgButton
MessageBeep
InsertMenuW
CreateWindowExW
UnregisterClassA
CharPrevA
DispatchMessageA
wsprintfA
UnhookWindowsHookEx
EndDialog
PostMessageW
GetParent
ExitWindowsEx
SetWindowTextA
GetActiveWindow
IsIconic
PeekMessageA
CharPrevW
RegisterClassExA
DialogBoxParamW
GetMessageW
GetDlgItemTextW
FindWindowW
GetWindowTextW
PostMessageA
RegisterClassA
ScreenToClient
CharUpperW
WinHelpW
GetAsyncKeyState
RegisterClassW
CheckRadioButton

kernel32

GetConsoleMode
GetACP
ExitProcess
GetCurrentProcessId
GlobalUnlock
GetLocaleInfoW
GetStartupInfoA
WaitForSingleObject
InterlockedExchange
VirtualAlloc
MultiByteToWideChar
SetUnhandledExceptionFilter
GetCurrentThreadId
QueryPerformanceCounter
GetVersion
GetThreadPriority
Sleep
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetFileAttributesA
HeapSize
FindResourceA
GetExitCodeProcess
FindNextFileW
GetLastError
GetCommandLineW
GetDriveTypeW
OpenEventA
OpenEventW
GetFileAttributesW
DeleteCriticalSection
GetTickCount
IsBadReadPtr
GetProcessHeap
GetExitCodeThread
InitializeCriticalSection
GetOEMCP

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbss
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a94bb372cbcf761aac83f4e96d96a88

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 49KB - Virtual size: 48KB

.textbss Size: 512B - Virtual size: 201B

DATA Size: 512B - Virtual size: 74KB

.textbss Size: 512B - Virtual size: 164B

.rsrc Size: 512B - Virtual size: 460B

.reloc Size: 512B - Virtual size: 20B

.text
Size: 49KB - Virtual size: 48KB

.textbss
Size: 512B - Virtual size: 201B

DATA
Size: 512B - Virtual size: 74KB

.textbss
Size: 512B - Virtual size: 164B

.rsrc
Size: 512B - Virtual size: 460B

.reloc
Size: 512B - Virtual size: 20B