ed1e67598807f8e053b4fb25aeda1e4db675f339cf4340245a516a75137b346c

Sharing

Copy URL Twitter E-mail

General

Target

ed1e67598807f8e053b4fb25aeda1e4db675f339cf4340245a516a75137b346c
Size

262KB
MD5

d7c9e200427977bb530a860839dfcbd6
SHA1

150cd7f2db27a54731f57b4942a54c8be322f0d9
SHA256

ed1e67598807f8e053b4fb25aeda1e4db675f339cf4340245a516a75137b346c
SHA512

5dc7ba52345863d0ed672d406b57fc958abbd1c8f6f28cdf92e20b652f309c2080eee9f8e094f74bd736c7cbe27e1295c7fa7d46f315637b95f35043a2d4590f
SSDEEP

6144:NPElxaPLZtcYa10eWCPprRmoHYfpxI0oypG0tUJ:NjPd6Y9gPprRmNpxlG0eJ

Score

N/A

Malware Config

Signatures

Files

ed1e67598807f8e053b4fb25aeda1e4db675f339cf4340245a516a75137b346c
.exe windows x86

c251519190075cec0e271b9093ed9d6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

SetupDiEnumDeviceInfo

user32

GetDoubleClickTime
PostMessageW
GetMessageW
ShowWindow
GetSysColorBrush
GetWindowLongW
UnhookWindowsHookEx
SetThreadDesktop
RegisterWindowMessageW
GetDC
MonitorFromWindow
DrawIconEx
SetCursorPos
CallWindowProcW
GetSystemMetrics
RegisterDeviceNotificationW
GetMonitorInfoW
CharNextW
FillRect
EnumDisplaySettingsW
IsWindow
PtInRect
CallNextHookEx
SetWindowLongW
UnregisterDeviceNotification

ole32

CoTaskMemFree

hid

HidP_GetSpecificButtonCaps
HidP_MaxUsageListLength
HidD_GetAttributes
HidD_FreePreparsedData

advapi32

RegOpenKeyW
InitializeSecurityDescriptor
RegOpenKeyExA
RegOpenKeyExW
RegDeleteKeyW
OpenThreadToken
SetSecurityDescriptorDacl
RegCreateKeyW
RegCloseKey
RegSetValueW
RegEnumKeyW
SetSecurityDescriptorOwner

atl

ord44
ord58
ord32
ord57
ord17
ord45

gdi32

CreateSolidBrush
DeleteObject

kernel32

GetSystemDirectoryW
GlobalDeleteAtom
UnmapViewOfFile
GetProcessWorkingSetSize
lstrcpyW
CancelIo
GetCurrentProcess
QueryPerformanceFrequency
QueueUserAPC
FlushInstructionCache
GetTickCount
CloseHandle
DuplicateHandle
SetThreadPriority
GetProcessHeap
WaitForSingleObject
CreateEventW
InterlockedDecrement
EnterCriticalSection
CreateMutexW
InterlockedIncrement
CancelWaitableTimer
GetModuleHandleA
CreateFileW
SetWaitableTimer
SetPriorityClass
VirtualFree
OpenEventW
CreateWaitableTimerW
MapViewOfFile
lstrlenW
VirtualAllocEx
GetOverlappedResult

msvcrt

_cexit
__setusermatherr
__CxxFrameHandler
_wfopen
_itow
wcslen
_adjust_fdiv
?terminate@@YAXXZ
__p__fmode
_beginthreadex
__set_app_type
_wcmdln
malloc
_purecall
_ftol
_c_exit
_CxxThrowException
??2@YAPAXI@Z

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c251519190075cec0e271b9093ed9d6b

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

user32

ole32

hid

advapi32

atl

gdi32

kernel32

msvcrt

Sections

.text Size: 184KB - Virtual size: 184KB

.data Size: 60KB - Virtual size: 60KB

.rsrc Size: 16KB - Virtual size: 588KB

.text
Size: 184KB - Virtual size: 184KB

.data
Size: 60KB - Virtual size: 60KB

.rsrc
Size: 16KB - Virtual size: 588KB