b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4

Sharing

Copy URL

Twitter E-mail

General

Target

b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4
Size

804KB
MD5

0f65a1dc01009e772b18cb4af2120eb3
SHA1

7894cd30e51e4f71b9501f686891d6fb2bb06257
SHA256

b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4
SHA512

0af7707411899c82131ce21e7418a5df6da42501ef03717e6c3f25e21a21a26871e5d52d32be71f248c5ce171f2130379e1a9107ad05e05c729ae879f0857d98
SSDEEP

12288:dM6FYg0XOxDmdbeho1+ZCdjahVip0RakSXPFYgjmZTNT0gxK:Jmg3Mpm/CdjahVMkNquh0p

Score

N/A

Malware Config

Signatures

Files

b56ddad470f9fdf23892b41424b413e24080629e0192a05140f0ceb4e64205e4
.exe windows x86

bea6d25cc5dadc69ae564e96ab5dcb40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetLastError
lstrcmpiW
GetSystemTimeAsFileTime
CreateFileW
InitializeCriticalSection
GetSystemTimeAsFileTime
DeleteCriticalSection
InterlockedDecrement
HeapAlloc
LeaveCriticalSection
GetCurrentThreadId
DisableThreadLibraryCalls
lstrcmpiW
LocalAlloc
LoadLibraryA
GetLastError
GetCurrentThreadId
DeleteCriticalSection
InterlockedIncrement
InterlockedIncrement
HeapAlloc
GetTickCount
GetSystemTimeAsFileTime
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
Sleep
MultiByteToWideChar
GetTickCount
VirtualProtect
SetLastError
UnhandledExceptionFilter
GetProcAddress
UnhandledExceptionFilter
ReadFile
LoadLibraryW
HeapAlloc
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
LocalFree
GetLastError
LoadLibraryW
QueryPerformanceCounter
LeaveCriticalSection
lstrlenA
GetCurrentThreadId
LoadLibraryW
GetCurrentThreadId
CreateEventW
EnterCriticalSection
lstrcmpiW
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
LeaveCriticalSection
GetCurrentThreadId
Sleep
InitializeCriticalSection
CreateThread
CreateEventW
QueryPerformanceCounter
UnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedDecrement
GetModuleHandleA
GetSystemTimeAsFileTime
LoadLibraryA
InterlockedExchange
InterlockedExchange
SetLastError
GetLastError
DisableThreadLibraryCalls
GetVersionExA
GetModuleHandleA
HeapAlloc
HeapFree
lstrlenA
CreateFileW
GetCurrentProcess
EnterCriticalSection
VirtualProtect
GetModuleFileNameA
CreateEventW
CreateEventW
GetModuleHandleA
lstrcmpiW

user32

DestroyWindow
IsDlgButtonChecked
CharNextW
GetWindowLongW
SetForegroundWindow
GetDC
PostMessageW
TranslateMessage
GetDesktopWindow
GetDesktopWindow
SetTimer
GetWindowLongW
EndPaint
SetTimer
GetClientRect
SetCursor
DispatchMessageW
GetSysColor
CreateWindowExW
SetForegroundWindow
IsDlgButtonChecked
SetTimer
SetCursor
SetTimer
SendMessageW
LoadIconW
LoadStringW
DefWindowProcW
EndPaint
ReleaseDC
IsDlgButtonChecked
GetFocus
GetClientRect
GetClientRect
SetCursor
ReleaseDC
LoadIconW
SetTimer
SetCursor
PostQuitMessage
GetFocus
PostMessageW
DefWindowProcW
KillTimer
SetWindowLongW
CreateWindowExW
wsprintfA
SetDlgItemTextW
ShowWindow
GetWindowLongW
BeginPaint
GetSystemMetrics
DispatchMessageW
PostMessageW
DialogBoxParamW
SetWindowTextW
DestroyWindow
SetDlgItemTextW
wsprintfA
EnableWindow
ReleaseDC
PostMessageW
SetWindowTextW
SetWindowTextW
SetWindowTextW
DefWindowProcW
LoadCursorW
GetDC
MessageBoxW
GetSystemMetrics
PostMessageW
DefWindowProcW
KillTimer
SetDlgItemTextW
CharNextW
BeginPaint
TranslateMessage
GetDesktopWindow
GetClientRect
EnableWindow
wsprintfA
EndDialog

Sections

.text
Size: 717KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bea6d25cc5dadc69ae564e96ab5dcb40

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 717KB - Virtual size: 968KB

.rdata Size: 4KB - Virtual size: 8KB

.pdata Size: - Virtual size: 4KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 717KB - Virtual size: 968KB

.rdata
Size: 4KB - Virtual size: 8KB

.pdata
Size: - Virtual size: 4KB

.rsrc
Size: 82KB - Virtual size: 84KB