ab5544fac935c9890301318594cd83b12d28e3c479470aed3a909d28958287ff

Sharing

Copy URL Twitter E-mail

General

Target

ab5544fac935c9890301318594cd83b12d28e3c479470aed3a909d28958287ff
Size

186KB
MD5

fe0923efe10f17bfc7bcec37322ef8ad
SHA1

6bcafb1203e3628984f6a5e4d4ae242816b0af2f
SHA256

ab5544fac935c9890301318594cd83b12d28e3c479470aed3a909d28958287ff
SHA512

1a7bef8ef367f6840b254a4e699a9da5d47fddc8ed4e21cee9bebae613effd677bb78062b41473c5194d149a27c959f787e26ff3e2edff30a6cfd54634795a57
SSDEEP

3072:TUhqoVEfnh+9h/W+WVx9bItMYtfvSTcQJaqn8FWLCcSzgWMtTKgzYF:whqognyh/NtMmRk8FSSzgW4K3

Score

N/A

Malware Config

Signatures

Files

ab5544fac935c9890301318594cd83b12d28e3c479470aed3a909d28958287ff
.exe windows x86

77cf61666392055a1e8e731dc9a27fad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetComboBoxInfo
CharPrevA
GetClassLongW
CharPrevExA
IsWindowEnabled
RegisterDeviceNotificationA
AppendMenuW
ScrollWindow
LoadKeyboardLayoutW
GetDCEx
ShowOwnedPopups

shell32

FindExecutableW
DragQueryFileW
Shell_NotifyIconA
DoEnvironmentSubstW
ShellAboutA
ExtractIconW
ShellExecuteW
DragQueryPoint

ole32

OleQueryCreateFromData
OleRegEnumVerbs
OleCreateEx
OleDestroyMenuDescriptor

wininet

InternetSetCookieA
InternetOpenUrlA
FtpCommandA
FindCloseUrlCache
RetrieveUrlCacheEntryFileW

gdi32

ColorCorrectPalette
CreateBitmapIndirect
AbortPath
AddFontResourceA
CreateBrushIndirect
CreateColorSpaceA
AnimatePalette

opengl32

glTexCoord4s
wglDeleteContext
glFlush
glIndexfv
glColor4f
glEndList
wglUseFontBitmapsW
glEvalMesh1

kernel32

SetStdHandle
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
RtlUnwind
WriteConsoleW
GetOEMCP
GetACP
GetCPInfo
Sleep
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
CloseHandle
CreateFileW
IsValidCodePage
HeapCreate
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GlobalMemoryStatusEx
SetEvent
SetThreadLocale
GetComputerNameA
InitializeCriticalSection
GetProcessIoCounters
SetConsoleTitleW
GetLastError
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77cf61666392055a1e8e731dc9a27fad

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

wininet

gdi32

opengl32

kernel32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 121KB - Virtual size: 120KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 121KB - Virtual size: 120KB