f41b2d20595da64a8bd47f83f9435306b4ecab8429275f2cb7855b7515c63613

Sharing

Copy URL Twitter E-mail

General

Target

f41b2d20595da64a8bd47f83f9435306b4ecab8429275f2cb7855b7515c63613
Size

5.0MB
MD5

d14fb080261c61a6a49493be50e30320
SHA1

808c827ab053881076d7f5158ceaa6649b72cf56
SHA256

f41b2d20595da64a8bd47f83f9435306b4ecab8429275f2cb7855b7515c63613
SHA512

494b99f3c0cb5b86c684c5d794faff6729d03d0c972b3dab68a479365ed4403e09d77487fad69ace4f945ca78003a544bc31acb412159eba5daa37e0b3149994
SSDEEP

12288:xaOvbI26VvxTSJB7BrsAF7jUZFpONu8w/kwCl3JFEZc:3OvxOJB7dEZ3Owf/IJEc

Score

N/A

Malware Config

Signatures

Files

f41b2d20595da64a8bd47f83f9435306b4ecab8429275f2cb7855b7515c63613
.exe windows x86

7a360f08814d9267b2033390edc45050

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
lstrlenA
lstrcpynW
FlushInstructionCache
GetCurrentProcess
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
SizeofResource
LoadLibraryExW
GetModuleFileNameW
GetCommandLineW
OpenMutexW
CloseHandle
VirtualAlloc
VirtualFree
LCMapStringW
GetVersionExW
GetStringTypeW
GetStringTypeA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
ExitProcess
Sleep
HeapReAlloc
FreeLibrary
LoadLibraryW
LCMapStringA
lstrcmpiW
GetProcAddress
InterlockedDecrement
RaiseException
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
WriteFile
GetStdHandle

user32

DefWindowProcW
CharNextW
DestroyWindow
TranslateAcceleratorW
GetWindowRect
InvalidateRect
SendMessageW
CreateWindowExW
PeekMessageW
PtInRect
IsWindow
MessageBeep
TrackPopupMenuEx
SetWindowPos
CallWindowProcW
LoadStringA
PostQuitMessage
SetFocus
LoadStringW
SetMenuDefaultItem
SetMenuItemInfoW
ShowWindow
MapWindowPoints
GetClientRect
PostMessageW
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
GetMenuItemInfoW
RemoveMenu
GetMenuItemCount
AppendMenuW
DestroyMenu
CreatePopupMenu
GetWindowLongW
UnregisterClassA

gdi32

GetObjectW
GetStockObject

advapi32

RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

comctl32

ImageList_LoadImageW
InitCommonControlsEx

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a360f08814d9267b2033390edc45050

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 311KB - Virtual size: 311KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 311KB - Virtual size: 311KB