d1ffb145137ae8976896200402cc1ee4d5d094be4d7c8d61c369e0ff9b0e617d

Sharing

Copy URL Twitter E-mail

General

Target

d1ffb145137ae8976896200402cc1ee4d5d094be4d7c8d61c369e0ff9b0e617d
Size

57KB
MD5

008df25fb673123c302a0571cd2c1444
SHA1

f0634ca97b09c03c00b46a114d0f6bb17c3a2a53
SHA256

d1ffb145137ae8976896200402cc1ee4d5d094be4d7c8d61c369e0ff9b0e617d
SHA512

7734b0d296cebca9857200246109ffacdb35e26f92d3d182c046a87ee5260b85a1e6b594755723479cafd5878e7ae8fe435e1b396b48cbc429310ef4d1138301
SSDEEP

768:Ilge9QlR04m2W+ys4sGLphX6XflSQy+GMNKAtJzgkseeYWEX5:IlAZm29VGLPXWflSc8KeqeU5

Score

N/A

Malware Config

Signatures

Files

d1ffb145137ae8976896200402cc1ee4d5d094be4d7c8d61c369e0ff9b0e617d
.exe windows x86

3e76eaa7359a1077692fd2f7bb263e8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetOpenStatus
ImmInstallIMEW
ImmEnumRegisterWordW
ImmGetDescriptionW
ImmGetCompositionFontA
ImmLockIMCC

kernel32

VirtualAlloc
Sleep
GetTickCount
GetConsoleWindow
FindClose
FindNextFileW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
ExitProcess
Wow64RevertWow64FsRedirection
CloseHandle
GetCurrentProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
Wow64DisableWow64FsRedirection
GetSystemDirectoryW
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
IsWow64Process
MultiByteToWideChar
WideCharToMultiByte
GetExitCodeProcess
WriteConsoleA
GetLocaleInfoA
HeapSize
HeapAlloc
GetLastError
HeapFree
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

odbc32

CursorLibLockStmt
ord86
ord17
ord14
ord210
ord8

mswsock

AcceptEx
WSARecvEx
GetAddressByNameW
GetServiceA

urlmon

WriteHitLogging
URLDownloadToFileA
URLDownloadToCacheFileW
FindMimeFromData

comdlg32

FindTextW
CommDlgExtendedError
PageSetupDlgW

user32

ShowWindow

ole32

CoInitialize

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e76eaa7359a1077692fd2f7bb263e8d

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

odbc32

mswsock

urlmon

comdlg32

user32

ole32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 12KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 12KB