4f0b645df9e50d99aa5e25f11939fdd08001daeba65e85a0e76d71148f9da7ee

Sharing

Copy URL Twitter E-mail

General

Target

4f0b645df9e50d99aa5e25f11939fdd08001daeba65e85a0e76d71148f9da7ee
Size

499KB
MD5

c5fc31c8145723e2cc5638506757745b
SHA1

609281328e6fc5b24af7ff0ce7f245019bd72023
SHA256

4f0b645df9e50d99aa5e25f11939fdd08001daeba65e85a0e76d71148f9da7ee
SHA512

decf0be5976d631c6991e6b4ad0c782dfac466b32396544efce1b49e0677e5f055ce030bb676294b2feeb2d02bc06edd7c2789f593bec414918ba2f3e3ea76bc
SSDEEP

12288:RHu+P1uF2SMXkPH3ZAYHHE2wJrB1AJXhpmpbUQ:9u+P1o2dXkP3u2wJl10UpQQ

Score

N/A

Malware Config

Signatures

Files

4f0b645df9e50d99aa5e25f11939fdd08001daeba65e85a0e76d71148f9da7ee
.exe windows x86

92f1608c52cd609de0fa545505a1bc64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
EnumDisplaySettingsW
DrawStateA
GetUserObjectInformationW
CreateWindowExA
GetWindowPlacement
CharNextExA
EndPaint
GetMonitorInfoW
DdeSetQualityOfService
MapVirtualKeyExW
MessageBoxW
RegisterClassExA
GetMenuBarInfo
WindowFromDC
SetCaretPos
RegisterClassA
DestroyCaret
GetLastActivePopup
SetSystemCursor
EmptyClipboard
IsIconic
IsMenu
ChangeDisplaySettingsA
GetClientRect
DestroyWindow
GetKeyboardLayoutList
GetCursor
InternalGetWindowText

comctl32

InitCommonControlsEx

kernel32

GetSystemTimeAsFileTime
CreateMutexA
HeapCreate
TlsFree
GetEnvironmentStringsW
TlsSetValue
GetCPInfo
HeapDestroy
CloseHandle
GetProfileStringW
ReadFile
GetEnvironmentStrings
AddAtomW
VirtualAlloc
ExitProcess
MultiByteToWideChar
InterlockedDecrement
GetCommandLineA
LCMapStringA
GetSystemTime
GetStringTypeW
WriteFile
SetEnvironmentVariableA
RtlZeroMemory
InterlockedExchange
LCMapStringW
GetLocalTime
TlsGetValue
GetVersion
SetStdHandle
HeapReAlloc
ReadConsoleInputA
MoveFileW
GetCommandLineW
GetStdHandle
GetModuleFileNameW
GetCurrentProcess
SetHandleCount
FlushFileBuffers
GetFileTime
GetModuleHandleA
EnterCriticalSection
MoveFileExW
TerminateProcess
DeleteCriticalSection
GetStartupInfoW
SetFilePointer
GlobalFree
TlsAlloc
GetProcAddress
GetStartupInfoA
LoadLibraryA
InterlockedIncrement
VirtualQuery
LocalHandle
LeaveCriticalSection
OpenMutexA
OpenFileMappingW
FindNextFileA
GetLastError
GetStringTypeA
VirtualFree
FormatMessageW
QueryPerformanceCounter
WideCharToMultiByte
GetModuleFileNameA
IsBadWritePtr
FillConsoleOutputAttribute
GetTimeZoneInformation
GetCurrentThreadId
CompareStringW
GetCurrentProcessId
GetFileType
UnhandledExceptionFilter
GetTickCount
RtlUnwind
ResetEvent
InitializeCriticalSection
SetLastError
HeapFree
SetConsoleTitleW
HeapAlloc
FreeEnvironmentStringsA
GetTempFileNameW
CompareStringA
FreeEnvironmentStringsW
GetCurrentThread

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1017KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92f1608c52cd609de0fa545505a1bc64

Headers

File Characteristics

Imports

user32

comctl32

kernel32

Sections

.text Size: 339KB - Virtual size: 339KB

.rdata Size: 21KB - Virtual size: 50KB

.data Size: 1.1MB - Virtual size: 1017KB

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 339KB - Virtual size: 339KB

.rdata
Size: 21KB - Virtual size: 50KB

.data
Size: 1.1MB - Virtual size: 1017KB

.rsrc
Size: 19KB - Virtual size: 18KB