f8e28bf0f0474ad67f578caeb4da2d11a33e09a1275d8d4492571324f9af3446

Sharing

Copy URL Twitter E-mail

General

Target

f8e28bf0f0474ad67f578caeb4da2d11a33e09a1275d8d4492571324f9af3446
Size

226KB
MD5

e1076769dbcb8ea35838d95fd6dd767e
SHA1

86cbca787d022523afa3551ac11f64a4c04c3a44
SHA256

f8e28bf0f0474ad67f578caeb4da2d11a33e09a1275d8d4492571324f9af3446
SHA512

3bd73be9d5a8c968183cba80106c08deadd55e0fd46c4e6d38e358191155806db8b490bf48929dbd224b91705579131011a2137fa4b760e3ef2069626586b0d4
SSDEEP

3072:m3c2aF7DwLZpeDzg6Yd0zDsI49/gP8RpdhUwOMogd2TEbqnmMiKXGSMo:ms2aWO/lYd0GpuMnOmUJ

Score

N/A

Malware Config

Signatures

Files

f8e28bf0f0474ad67f578caeb4da2d11a33e09a1275d8d4492571324f9af3446
.exe windows x86

c9e618b80030fd2d4aac7181f13e9429

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
GetWindowLongA
CharNextA
LoadStringA
CharUpperA
wsprintfA

comctl32

InitCommonControlsEx

kernel32

CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
CloseHandle
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
QueryPerformanceCounter
CreateEventW
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WaitForMultipleObjects

ole32

CoTaskMemFree
CoUninitialize
CreateBindCtx
CoCreateInstance
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoReleaseMarshalData
CoRevokeClassObject

advapi32

CreateServiceW
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
CloseServiceHandle

ntdll

VerSetConditionMask

gdi32

DeleteDC
DeleteObject
ExtEscape
GetDIBits
GetDeviceCaps
GetObjectW
GetStockObject
CreateDCW
CreateDIBSection

shell32

ShellExecuteA
ShellExecuteW
DragQueryFileA
DragQueryFileW

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9e618b80030fd2d4aac7181f13e9429

Headers

DLL Characteristics

File Characteristics

Imports

user32

comctl32

kernel32

ole32

advapi32

ntdll

gdi32

shell32

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 17KB - Virtual size: 32KB

.reloc Size: 11KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 12KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 17KB - Virtual size: 32KB

.reloc
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 12KB