9db7d99c735afe1085a420bd4aade3a665e6cb23c5e8483d00894eda674999f4

Sharing

Copy URL Twitter E-mail

General

Target

9db7d99c735afe1085a420bd4aade3a665e6cb23c5e8483d00894eda674999f4
Size

439KB
MD5

22c8ff5d8fc46d82901319d0dd1a1827
SHA1

5ce2b24796fc51250df7437b75229156ff2467f9
SHA256

9db7d99c735afe1085a420bd4aade3a665e6cb23c5e8483d00894eda674999f4
SHA512

98c73585a8ff024df050fafaaf10b1cd426664e6173814eab75d1734db3d7ba7f2bc4451a347814c92ea770f293337b63c0ffc86f6aded3abea9d810b5ed8631
SSDEEP

6144:/mq6dL6F4xChn2xyyNv9Fz6EyJk5StEwi4urakH6gvyRlQ:965O+CJ2xyyNvL2EyOJrRrdDyRlQ

Score

N/A

Malware Config

Signatures

Files

9db7d99c735afe1085a420bd4aade3a665e6cb23c5e8483d00894eda674999f4
.exe windows x86

c4d9f540246a2194cfdf77ce35f94e2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
HeapAlloc
GetTickCount
VirtualFree
GetProcessHeap
HeapDestroy
HeapCreate
ReadFile
VirtualAlloc
GetCurrentThreadId
CloseHandle
GetVersion
DeleteFileA
RaiseException
VirtualQuery
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
IsProcessorFeaturePresent

user32

SetDlgItemInt
MessageBoxA
MessageBoxExA
wsprintfA

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4d9f540246a2194cfdf77ce35f94e2d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 99KB - Virtual size: 99KB

.rdata Size: 206KB - Virtual size: 206KB

.data Size: 118KB - Virtual size: 1.3MB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 99KB - Virtual size: 99KB

.rdata
Size: 206KB - Virtual size: 206KB

.data
Size: 118KB - Virtual size: 1.3MB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 7KB - Virtual size: 7KB