ae26439b268a3368f97b0086a66b87f171ab1195ab16bc5d7067366de3916c59

Sharing

Copy URL Twitter E-mail

General

Target

ae26439b268a3368f97b0086a66b87f171ab1195ab16bc5d7067366de3916c59
Size

62KB
MD5

137d415fd4c0b0de1627cf9abf985ae5
SHA1

bf0c76fa80b800d94db48a1180d146cc2d26647f
SHA256

ae26439b268a3368f97b0086a66b87f171ab1195ab16bc5d7067366de3916c59
SHA512

e82a09b747d96a4fa88fad423093838408da82e4e51b3daa09a07cc8a387df16fcc87a34c7d860f66914c8134351c055e9f844ea4f52d01b11b88bed04eb8d4f
SSDEEP

768:Lww4LeEnsjJ3Td2RSGVLlxz+sq3uh/mvJKqaU4uJRU00OTJ9lIVlJPF:LwDdnsFRCSuLlxz+t3QmIqEuLjJ9Cp

Score

N/A

Malware Config

Signatures

Files

ae26439b268a3368f97b0086a66b87f171ab1195ab16bc5d7067366de3916c59
.exe windows x86

ab98eb43e5ddae71e0055899149bc746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
HeapReAlloc
CloseHandle
OpenProcess
TerminateProcess
lstrcmpW
GetStdHandle
WriteConsoleW
GetOEMCP
WideCharToMultiByte
HeapAlloc
WriteFile
GetModuleHandleW
CreateFileA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
HeapSize
GetLocaleInfoA
GetStringTypeA
GetCurrentProcessId
GetConsoleWindow
GetTickCount
Sleep
VirtualAlloc
GetProcessHeap
HeapFree
LCMapStringW
LCMapStringA
CreateFileW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameA
GetStringTypeW
GetProcAddress
ExitProcess
MultiByteToWideChar
GetLastError
ReadFile
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId

gdi32

CreateRectRgnIndirect
PlayEnhMetaFile
ExcludeClipRect
GetTextExtentPointA
CreateEllipticRgn
DescribePixelFormat

winmm

midiInGetID
mmioRenameA
waveInGetDevCapsW
midiOutCachePatches
timeKillEvent

setupapi

SetupCreateDiskSpaceListA
SetupCloseLog
SetupAdjustDiskSpaceListA

rtutils

TraceRegisterExA
TracePrintfExA
RouterLogEventStringW
RouterGetErrorStringA
RouterLogEventA

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseColorA
GetFileTitleW
GetOpenFileNameW
CommDlgExtendedError

shell32

WOWShellExecute
ShellExecuteA
ShellExecuteExA

odbc32

ord255
ord232
ord235
ord8
ord156
ord63
ord35
ord136
ord170
ord29

loadperf

LoadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW

user32

PostMessageW
GetWindowThreadProcessId
EnumWindows
ShowWindow
LoadStringW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab98eb43e5ddae71e0055899149bc746

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

winmm

setupapi

rtutils

comdlg32

shell32

odbc32

loadperf

user32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 3KB