a4421c021cab7c29f9c085ea44b436c9b92640e373713f1bac1c129a71d96d7c

Sharing

Copy URL Twitter E-mail

General

Target

a4421c021cab7c29f9c085ea44b436c9b92640e373713f1bac1c129a71d96d7c
Size

812KB
MD5

0a72c37eac3d8b7117618c5d6c3cbf6f
SHA1

6196b38c63123699b64a92c086b3bfa4c56c81f5
SHA256

a4421c021cab7c29f9c085ea44b436c9b92640e373713f1bac1c129a71d96d7c
SHA512

b1e9352437c167ee926506473d51a0b1d74b643e54e9721091387efe5da6c76c7ceae3869ecebe7046a8cece35bf76d749805d52b1229977a5c6dc8e77cc01c2
SSDEEP

12288:xhvPw6ww5p683lIvc9AX00SimhAL9W8yflWgxL:xhvPwB4po5X3SimOWVtW4

Score

N/A

Malware Config

Signatures

Files

a4421c021cab7c29f9c085ea44b436c9b92640e373713f1bac1c129a71d96d7c
.exe windows x86

46fb8f9f53cfd8a90d710ae6b450ddb4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
HeapAlloc
LocalFree
GetProcAddress
GetModuleFileNameW
InterlockedExchange
GetCurrentThreadId
EnterCriticalSection
SetLastError
ReadFile
LocalFree
InitializeCriticalSection
MultiByteToWideChar
GetModuleHandleW
ReadFile
GetCurrentProcess
InitializeCriticalSection
HeapFree
VirtualAlloc
GetProcessHeap
GetCurrentProcess
HeapFree
GetLastError
InitializeCriticalSection
CreateFileW
CreateThread
SetLastError
CreateFileW
GetVersionExA
GetProcessHeap
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetSystemTimeAsFileTime
LocalAlloc
CreateEventW
CreateFileW
LeaveCriticalSection
GetProcessHeap
GetCurrentThreadId
QueryPerformanceCounter
LoadLibraryA
GetCurrentThreadId
CreateThread
HeapDestroy
InitializeCriticalSection
HeapFree
FreeLibrary
MultiByteToWideChar
GetModuleHandleA
GetProcessHeap
CloseHandle
CreateThread
GetCurrentProcess
EnterCriticalSection
FreeLibrary
LoadLibraryA
HeapAlloc
GetModuleFileNameW
Sleep
GetProcessHeap
InterlockedDecrement
DeleteCriticalSection
GetModuleHandleA
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
GetVersionExA
VirtualProtect
CreateFileW
EnterCriticalSection
CreateEventW
GetCurrentProcess
EnterCriticalSection
DisableThreadLibraryCalls
Sleep
GetModuleHandleW
GetProcAddress
EnterCriticalSection
HeapDestroy
SetLastError
GetProcAddress
VirtualProtect
InterlockedDecrement
GetModuleHandleW
LoadLibraryA
Sleep
LoadLibraryA
GetModuleFileNameA
lstrlenA
CreateEventW
InterlockedCompareExchange
UnhandledExceptionFilter
GetCurrentProcessId
UnhandledExceptionFilter
LoadLibraryW
LocalFree
InterlockedDecrement
GetCurrentProcess
DeleteCriticalSection
LocalAlloc
DisableThreadLibraryCalls
GetCurrentThreadId
LeaveCriticalSection
FreeLibrary
CloseHandle

user32

IsWindow
LoadStringW
DispatchMessageW
PostQuitMessage
DestroyWindow
PostMessageW
LoadStringW
SetDlgItemTextW
IsWindow
GetClientRect
GetClientRect
GetClientRect
GetDlgItem
wsprintfA
LoadStringW
SetForegroundWindow
CharNextW
SetWindowPos
DefWindowProcW
PostQuitMessage
PeekMessageW
LoadCursorW
SetForegroundWindow
DispatchMessageW
ShowWindow
BeginPaint
PostQuitMessage
GetSysColor
SetWindowLongW
GetFocus
IsDlgButtonChecked
SetDlgItemTextW
wsprintfA
IsWindow
SetFocus
GetWindowRect
InvalidateRect
PostMessageW
GetWindowLongW
GetDC
PeekMessageW
GetWindowRect
SetDlgItemTextW
PostMessageW
CreateWindowExW
GetClientRect
GetClientRect
GetDlgItem
GetWindowRect
GetDC
DefWindowProcW
wsprintfA
PeekMessageW
GetFocus
SetWindowLongW
KillTimer
KillTimer
LoadCursorW
PostQuitMessage
SetFocus
GetWindowRect
wsprintfA
DefWindowProcW
GetWindowLongW
ReleaseDC
DefWindowProcW
GetDesktopWindow
GetSystemMetrics
GetParent
DefWindowProcW
PostQuitMessage
GetSystemMetrics
GetDesktopWindow
CreateWindowExW
EndDialog
KillTimer
EndDialog
wsprintfA
DispatchMessageW
EndDialog
ReleaseDC
GetDC
GetSystemMetrics
SendMessageW
DialogBoxParamW
TranslateMessage
LoadCursorW
SetForegroundWindow
BeginPaint
DestroyWindow
EndDialog
LoadCursorW
GetWindowRect
LoadCursorW
GetParent
PeekMessageW
SetWindowPos
DestroyWindow
SetWindowLongW
GetWindowRect
SendDlgItemMessageW
SetCursor
GetDlgItem
GetDesktopWindow
KillTimer
GetClientRect
SetWindowPos
TranslateMessage

Sections

.text
Size: 723KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46fb8f9f53cfd8a90d710ae6b450ddb4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 723KB - Virtual size: 976KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 723KB - Virtual size: 976KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB