65384f23b612602d30bbd081b02d137aedc9c7301bb104c78f34b674f4ed28ef

Sharing

Copy URL Twitter E-mail

General

Target

65384f23b612602d30bbd081b02d137aedc9c7301bb104c78f34b674f4ed28ef
Size

61KB
MD5

9462abf1a59981e4a438452804ba0d1c
SHA1

3a5f7ba4c037beb745d79c79e4df177405768ccb
SHA256

65384f23b612602d30bbd081b02d137aedc9c7301bb104c78f34b674f4ed28ef
SHA512

64643ba339ce1ed23c92c5a2b1bf80b7e0b4074039782f685d0de130b10e3b338657f7fb107a314144cc199545a5923699a1452009130d72592762deafa33ca9
SSDEEP

768:yAzrgeVIxuEDamy+WsUQVLSNiVdXXQOQy6LIBTMz4tl4+se5WEX5K9CD:yAzrg5am1NVL2iVdHQOhizShR5K9

Score

N/A

Malware Config

Signatures

Files

65384f23b612602d30bbd081b02d137aedc9c7301bb104c78f34b674f4ed28ef
.exe windows x86

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContextEx
ImmDisableIME
ImmShowSoftKeyboard
ImmGetCompositionFontA

kernel32

WideCharToMultiByte
MultiByteToWideChar
IsWow64Process
GetCurrentProcess
VirtualAlloc
Sleep
GetTickCount
FindClose
FindNextFileW
FindFirstFileW
lstrcatW
lstrcpyW
lstrlenW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
ExitProcess
Wow64RevertWow64FsRedirection
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCommandLineW
Wow64DisableWow64FsRedirection
GetSystemDirectoryW
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateFileW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapAlloc
GetLastError
HeapFree
GetStartupInfoW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
RtlUnwind
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle

loadperf

LoadPerfCounterTextStringsA

wininet

SetUrlCacheEntryGroup
HttpEndRequestW

rtm

RtmBlockSetRouteEnable
MgmRegisterMProtocol

ole32

HACCEL_UserSize
OleLoad
CoInstall
CoInitialize
SNB_UserFree

winmm

joyGetThreshold
mmioWrite
midiStreamPause
mmioRenameA
midiInGetNumDevs

urlmon

WriteHitLogging
CoInternetCreateZoneManager

msacm32

acmFormatChooseW
acmStreamClose
acmFormatEnumA
acmFormatTagEnumA
acmDriverAddA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79256057b91513dc7e33353b98510b3e

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

loadperf

wininet

rtm

ole32

winmm

urlmon

msacm32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB