fbf9c5f417670cd2e0c3f5c0ddd9706fe880f0789de75391751daba3b0d63ea1

Sharing

Copy URL Twitter E-mail

General

Target

fbf9c5f417670cd2e0c3f5c0ddd9706fe880f0789de75391751daba3b0d63ea1
Size

375KB
MD5

1237a5a77111eccdb95a99b0bdebe353
SHA1

7977772029bb7b6b824207ed77c6a4a36036f637
SHA256

fbf9c5f417670cd2e0c3f5c0ddd9706fe880f0789de75391751daba3b0d63ea1
SHA512

be34b4163c23de51e7db8c74b66880dc1e645704b07585524cbcc4d963dbf7833f8a7f10406ff98ffd62cfec823eb0adafd938220bb355b47d657eb4fb4cb84f
SSDEEP

6144:NwnlSZGWaWZmtugRTKczwzf9opWYPzm5TXCYViDeT6yGMTC+7wMgsnlRz4088k:WlSZGdW0tugNLKmpnPzsTXCJyT4oeMg8

Score

N/A

Malware Config

Signatures

Files

fbf9c5f417670cd2e0c3f5c0ddd9706fe880f0789de75391751daba3b0d63ea1
.exe windows x86

7b54f3624949452567e549421b412068

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetModuleHandleA
GetStdHandle
VirtualAlloc
LocalAlloc
GetVersionExA
CreateEventA
GetLastError
GetEnvironmentStrings
CreateMutexA
CreateSemaphoreA
GlobalAlloc
GetCurrentProcessId
ExitProcess
SetLastError
SetFilePointerEx
DeleteFileW
LockResource
GetStartupInfoW
SetFilePointer
CreateEventW
FindNextFileW
GetVersionExW
InterlockedCompareExchange
WriteConsoleW
GetLocaleInfoA
GlobalFree
GetModuleHandleW
FindCloseChangeNotification
GlobalLock
LCMapStringA
CreateFileMappingA
Sleep
GetCurrentThread
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
HeapAlloc
SetEnvironmentVariableA
FatalAppExitA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

user32

GetParent
GetWindowDC
GetWindowTextLengthW
GetWindowTextA
EndPaint
SetForegroundWindow
SetWindowPos
SendMessageA
GetClientRect
GetWindowRect
SetTimer
GetDCEx
SetRectEmpty
IsWindowEnabled
SetCursor
EnableWindow
GetMenuItemCount
DestroyWindow
GetSysColorBrush
GetWindowThreadProcessId
InvalidateRect
SetMenuContextHelpId
ReleaseDC

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 301KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b54f3624949452567e549421b412068

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 301KB - Virtual size: 335KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 301KB - Virtual size: 335KB

.rsrc
Size: 19KB - Virtual size: 19KB