a1939fe37480245ba66641235c6a368727e8408d4e588c3058b3beb0d9df12ab

Sharing

Copy URL

Twitter E-mail

General

Target

a1939fe37480245ba66641235c6a368727e8408d4e588c3058b3beb0d9df12ab
Size

80KB
MD5

f886c4a20dd0d9ba359337c17100c714
SHA1

4c6117225817b687603e74067bd938cb20d7d8b2
SHA256

a1939fe37480245ba66641235c6a368727e8408d4e588c3058b3beb0d9df12ab
SHA512

b573de1bfcd13f68f8249a002e26be2064af7271c5482f81acee515a151f8ffe1b2cdb9151767a1f3a8ed867e97ca8b1cb1d039f2da51d9c57348956052d041c
SSDEEP

1536:aHoWg+YEbis23ZaaWqGxOfgDNpToKyoyjVVwPwBPwti5pt1:9EbL2JP7hVwPw9wti5pt1

Score

N/A

Malware Config

Signatures

Files

a1939fe37480245ba66641235c6a368727e8408d4e588c3058b3beb0d9df12ab
.exe windows x86

3e6f9fed20e6fcd42c88309868b9c91c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CopyFileA
SetFileAttributesA
GetLocalTime
GetModuleHandleA
DeleteFileA
CompareStringW
CompareStringA
HeapSize
GetSystemDirectoryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
GetProcessHeap
SetEndOfFile
LoadLibraryA
GetConsoleWindow
Sleep
GetWindowsDirectoryA
LCMapStringW
LCMapStringA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetTimeZoneInformation
IsValidCodePage
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetFullPathNameA
HeapFree
GetCurrentDirectoryA
GetModuleHandleW
GetProcAddress
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEnvironmentVariableA

user32

DispatchMessageA
ShowWindow
SetWindowsHookExA
MapVirtualKeyA
GetAsyncKeyState
GetWindowTextA
GetForegroundWindow
GetKeyboardState
TranslateMessage
GetMessageA
GetKeyNameTextA
ToAscii
GetKeyState
CallNextHookEx
GetWindowTextLengthA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

wininet

FtpPutFileA
InternetOpenA
InternetCloseHandle
InternetConnectA

ws2_32

gethostbyname
WSAStartup
inet_ntoa
gethostname

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e6f9fed20e6fcd42c88309868b9c91c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

ws2_32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 4KB - Virtual size: 4KB