c92a7da9372f6c5f1f1464aaaa4ce6bc[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

c92a7da9372f6c5f1f1464aaaa4ce6bc.exe
Size

520KB
MD5

c92a7da9372f6c5f1f1464aaaa4ce6bc
SHA1

07dac29c1266ab6e49d89ae40eeece41d07875dd
SHA256

4fc12de856dbb5dc58df001bd44e75ad42e106b49ff8eee361cd000744258eb3
SHA512

90f4706330543cf976ccae83ae5b1a4b80783e09a2197b01120027882b915ebd02e2bcf95eb001fb37bcb92a51f794865c54e5a135ae93ec73cdb3ecab46a695
SSDEEP

6144:OfVqINU1IsUXvPRzQMG+6mbt6HKmpjERYkGAvgM7l5vxsQUYrs:OdxOIs4Z1t6NpQSA355vixY

Score

N/A

Malware Config

Signatures

Files

c92a7da9372f6c5f1f1464aaaa4ce6bc.exe
.exe windows x86

d381f7bcb1b95d4ba0d8ce8e1dbcd187

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

srand

wininet

FindNextUrlCacheEntryExA

gdi32

FillRgn
GetLayout
GetPixel
ExtTextOutW
GetBitmapDimensionEx

powrprof

GetPwrCapabilities

version

GetFileVersionInfoW
GetFileVersionInfoSizeW

advapi32

LookupPrivilegeDisplayNameA
GetEventLogInformation
GetOldestEventLogRecord
InitiateSystemShutdownW

kernel32

FreeLibrary
GetCommConfig
IsProcessInJob
GetTimeZoneInformation
GetModuleFileNameW
GetWindowsDirectoryW
LocalFlags
WritePrivateProfileStructA
CloseHandle
OutputDebugStringA
GetModuleHandleA
GetNLSVersion
GetLastError
FindVolumeClose
lstrcmpW
GetExitCodeThread
GetStringTypeExW
GetCommModemStatus
LocalUnlock
lstrcmpiW
GetPrivateProfileIntW
Module32First
DeleteCriticalSection

user32

GetWindowRgnBox
GetSubMenu
LoadIconA
DrawIconEx
DeleteMenu
FindWindowW
GetMenuStringW
ExitWindowsEx
GetCursorPos
GetProcessDefaultLayout
DrawTextA
LoadIconW
GetLastInputInfo

urlmon

FaultInIEFeature

oleaut32

GetRecordInfoFromGuids

mscms

GetStandardColorSpaceProfileW

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d381f7bcb1b95d4ba0d8ce8e1dbcd187

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wininet

gdi32

powrprof

version

advapi32

kernel32

user32

urlmon

oleaut32

mscms

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 360KB - Virtual size: 358KB

.data Size: 48KB - Virtual size: 55KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 360KB - Virtual size: 358KB

.data
Size: 48KB - Virtual size: 55KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB