9694e7e1f338b5796f5cbbf8338f361e734919f4b90819b663a4817ceb6d248f

Sharing

Copy URL Twitter E-mail

General

Target

9694e7e1f338b5796f5cbbf8338f361e734919f4b90819b663a4817ceb6d248f
Size

76KB
MD5

679e3fc32dcb5fc5503fcdc1efe84179
SHA1

3beee4fd8f0bb948f3e877389ec2bc2bd352f689
SHA256

9694e7e1f338b5796f5cbbf8338f361e734919f4b90819b663a4817ceb6d248f
SHA512

115ee22b69a9d7b48316f639f0c4cd1e60d58a512e1c745f000b3d6b43bcaf06b254328aabacd141b1c562eb27f0615d6376872e3c9715ad435522197dd8d84a
SSDEEP

1536:x72l47gPun+rtTik4E68aIdnpVOE9VW8ob5Ckou5mNPvbaO9Q3:04iZigCUpVOE948o9qVB2Oy

Score

N/A

Malware Config

Signatures

Files

9694e7e1f338b5796f5cbbf8338f361e734919f4b90819b663a4817ceb6d248f
.exe windows x86

f703e32ba6b37ffcb1bf4516bb50f0f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtResumeThread
NtCreateTimer
RtlEncodePointer
ZwSetInformationThread

user32

MonitorFromPoint
SendMessageW
CallWindowProcW
InvalidateRgn
ShowCursor
SetTimer
UnhookWindowsHookEx
GetClipboardData
GetUserObjectInformationW
GetSysColor
DestroyWindow
SetWindowPos
CharUpperBuffW
MapVirtualKeyW
GetWindowLongW
ReleaseDC
PostMessageW
GetActiveWindow
PeekMessageA
DestroyCaret
RegisterClipboardFormatW
GetInputState
CreateMenu
GetCapture
SetClipboardData
DrawTextA
SetScrollRange
GetMenuItemCount
PeekMessageW
SetKeyboardState
GetClientRect
ReleaseCapture
DrawFrameControl
WaitMessage
SetScrollInfo
ScreenToClient
SetFocus
IsWindowEnabled
SetScrollPos

kernel32

SleepEx
FreeLibrary
lstrcmpW
LoadLibraryExW
SetErrorMode
FormatMessageA
MoveFileW
EnumCalendarInfoW
VirtualAllocEx
LockResource
TerminateProcess
InterlockedDecrement
GetPriorityClass
CloseHandle
GetSystemDefaultLCID
GetLastError
UnhandledExceptionFilter
GetFileAttributesW
GetVersionExW
GetModuleFileNameW
GetProcessHeaps
GlobalSize
GetSystemTimeAsFileTime
FindResourceW

ole32

ProgIDFromCLSID
OleSetClipboard
CreateILockBytesOnHGlobal
CoInitialize
CoGetMalloc
CoRevokeClassObject
ReleaseStgMedium
GetHGlobalFromILockBytes
OleGetClipboard
WriteFmtUserTypeStg
OleCreateMenuDescriptor

dmocxt40

_Inf
_FDnorm
_LCosh
_Getctype
_LPoly
_Wcrtomb
_Getcvt
_FDtest
_Dtest
_Denorm

gdi32

CreateICW
ExtTextOutA
GetCurrentPositionEx
GetWinMetaFileBits
EnumFontsW
CreateSolidBrush
GetTextCharsetInfo
GetClipBox
GetDIBits
GetTextMetricsW
LPtoDP
SetWindowExtEx
GdiFlush
ExtTextOutW
Ellipse
SetBitmapBits
GetObjectW
Rectangle
DeleteEnhMetaFile
GetRgnBox

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f703e32ba6b37ffcb1bf4516bb50f0f7

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

user32

kernel32

ole32

dmocxt40

gdi32

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 108KB - Virtual size: 107KB

.rsrc Size: 27KB - Virtual size: 28KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 108KB - Virtual size: 107KB

.rsrc
Size: 27KB - Virtual size: 28KB