b6977be597346ea20adac61d69c2dfd863d7d013dcef3483e1569e26f81b3bfb

Sharing

Copy URL Twitter E-mail

General

Target

b6977be597346ea20adac61d69c2dfd863d7d013dcef3483e1569e26f81b3bfb
Size

200KB
MD5

4be0491c2d2968ac4fd49745ff7e5f8f
SHA1

44b6e08b9d70c890345189a9eb3321e6d670e555
SHA256

b6977be597346ea20adac61d69c2dfd863d7d013dcef3483e1569e26f81b3bfb
SHA512

6ca7a10408ef952b1939d25095c158ec40ef0c23e636af9442283c69df9ad3b7e1a7e8ae951188f4103befd0502a210e17d0a07a7b091679d9ebea44107cde88
SSDEEP

6144:0oXABILo6SvWNIBfV31fl7HjsAeyQoux4dcjzOpZ6z:0XKsvW2ZV31fl7DlQB4dIOXg

Score

N/A

Malware Config

Signatures

Files

b6977be597346ea20adac61d69c2dfd863d7d013dcef3483e1569e26f81b3bfb
.exe windows x86

bee46449bf93beae3e074bfd8614977a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetConsoleOutputCP
QueryPerformanceCounter
GetProcAddress
CreateMutexW
VirtualAlloc
IsValidCodePage
DeleteFileW
CompareStringA
InterlockedIncrement
LoadResource
GetFullPathNameW
FileTimeToSystemTime
WriteConsoleW
GetExitCodeProcess
GetTickCount
LoadLibraryA
FindClose

user32

GetMessageW
TranslateMessage
EndDialog
DestroyCursor
SetDlgItemInt
SetWindowPos
UpdateWindow
SetWindowLongA
LoadStringW
GetWindowLongW
SetWindowTextW
CallNextHookEx
CreatePopupMenu
EndPaint
GetMessageA
mouse_event
CharUpperW
ScreenToClient
DispatchMessageA
RealChildWindowFromPoint
TranslateAcceleratorW
GetScrollPos
DestroyAcceleratorTable
FillRect

gdi32

CreateSolidBrush
OffsetWindowOrgEx
CreatePatternBrush
PatBlt
DeleteObject
RemoveFontResourceW
EndPage
SetBkColor
GetStockObject
ExtTextOutW
StartDocW
SetBrushOrgEx
Rectangle
GetPixel
SetTextAlign
SetROP2
CreateCompatibleDC
EnumFontFamiliesExW
RestoreDC
SaveDC

comdlg32

GetOpenFileNameW
PrintDlgW
GetSaveFileNameW
ChooseColorW

advapi32

RegEnumKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
IsTextUnicode
RegCreateKeyExW
RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bee46449bf93beae3e074bfd8614977a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 176KB - Virtual size: 176KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 1024B - Virtual size: 712B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 176KB - Virtual size: 176KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 1024B - Virtual size: 712B