c05b429a95495689e148b11c391a84b08e3645abe7d1e10b797206892beae0ba

Sharing

Copy URL Twitter E-mail

General

Target

c05b429a95495689e148b11c391a84b08e3645abe7d1e10b797206892beae0ba
Size

372KB
MD5

0d5fcba4751647f21fe42b7781047672
SHA1

89230891768b0733c38206a4c3a51b06b095e617
SHA256

c05b429a95495689e148b11c391a84b08e3645abe7d1e10b797206892beae0ba
SHA512

3c5e80c91d77b7811f5d76ee857fa5e864eb08a64a11e84ae47ad5422ecd096c4952bb3b06ab6ccab48de5dd2c38b33ea18c836d2695eca9d7348122915289ee
SSDEEP

6144:eWiQEUETslmQh0s2rEjYONpRBPWq7naXmgXljIe1MECLT6r:FdEUEQlxh0trEsCBPWiuOLEEs

Score

N/A

Malware Config

Signatures

Files

c05b429a95495689e148b11c391a84b08e3645abe7d1e10b797206892beae0ba
.exe windows x86

cb69d033662e55f3c81911d271adf53b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetModuleHandleA
GlobalAlloc
GetVersionExA
CreateMutexA
GetCurrentProcessId
VirtualAlloc
GetEnvironmentStrings
CreateEventA
GetLastError
GetStdHandle
CreateSemaphoreA
GetCurrentThread
LocalAlloc
WaitForSingleObjectEx
FreeEnvironmentStringsW
GlobalUnlock
ExitProcess
SetLastError
SetFilePointerEx
DeleteFileW
LockResource
GetStartupInfoW
SetFilePointer
CreateEventW
FindNextFileW
GetVersionExW
InterlockedCompareExchange
WriteConsoleW
GetLocaleInfoA
GlobalFree
GetModuleHandleW
FindCloseChangeNotification
GlobalLock
LCMapStringA
CreateFileMappingA
Sleep
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
SetEnvironmentVariableA
HeapAlloc
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection

user32

ReleaseDC
GetWindowDC
GetWindowTextLengthW
GetWindowTextA
EndPaint
SetForegroundWindow
SetWindowPos
SendMessageA
GetClientRect
GetWindowRect
SetTimer
GetDCEx
SetRectEmpty
IsWindowEnabled
SetCursor
EnableWindow
GetMenuItemCount
DestroyWindow
GetSysColorBrush
GetWindowThreadProcessId
InvalidateRect
SetMenuContextHelpId
GetParent

shell32

SHFileOperationW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb69d033662e55f3c81911d271adf53b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 303KB - Virtual size: 344KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 303KB - Virtual size: 344KB

.rsrc
Size: 15KB - Virtual size: 14KB