95f7b0faac063f2121e4eb069c449532e66d51981978d86de9e0e1d1649a5934

Sharing

Copy URL Twitter E-mail

General

Target

95f7b0faac063f2121e4eb069c449532e66d51981978d86de9e0e1d1649a5934
Size

266KB
MD5

3f728d0c157bbd9859bbb133e0cc26e1
SHA1

08a97ee67c292dc4ea47a3e4d308a56b55d1847e
SHA256

95f7b0faac063f2121e4eb069c449532e66d51981978d86de9e0e1d1649a5934
SHA512

dd6d50a274cc431cf9188dc1d2c8fa36104dd5bba89de7f8c1ea654ff544f1cf4e75b3bebb5607d0a08d5353a974699ddb043ff580503ddc6560e8d1e23e939c
SSDEEP

3072:ykKQ1xnlhmLpuPDT/lsoBcAq56aIQA5VoKnEdjdqupB2WxBoXrFGWemnphaO8/j+:hUvzkD3vmVSJl9t/eGAbBe3YOau

Score

N/A

Malware Config

Signatures

Files

95f7b0faac063f2121e4eb069c449532e66d51981978d86de9e0e1d1649a5934
.exe windows x86

863ba274defc9a8f7cc146dac2f4a384

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBkColor
GetDCBrushColor
GetDCPenColor
GetClipRgn
GetDeviceCaps
GetGraphicsMode
GetMapMode
GetNearestColor
GetPixelFormat
GetPolyFillMode
GetSystemPaletteUse
GetTextCharacterExtra
GetTextCharsetInfo
SetSystemPaletteUse
SetTextCharacterExtra
SetTextJustification
UpdateColors

user32

LoadIconA
GetWindowLongA
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
RemovePropA
GetPropA
GetScrollPos
EndPaint
BeginPaint
GetWindowDC
GetDC
WindowFromDC
GetForegroundWindow
DrawTextA
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenu
IsWindowEnabled
IsWindowUnicode
GetQueueStatus
GetInputState
GetKeyboardType
SetFocus
CheckDlgButton
GetDlgItemInt
GetDlgItem
EndDialog
ShowWindow
CallWindowProcA
PostMessageA
SendMessageA

kernel32

SetEnvironmentVariableA
ReadConsoleW
ReadFile
SetEndOfFile
GetTimeZoneInformation
WriteConsoleW
SetFilePointerEx
SetStdHandle
CreateFileW
GetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetStringTypeW
OutputDebugStringW
HeapReAlloc
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetFileType
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetStdHandle
DeleteFileA
FindClose
SetFilePointer
IsDebuggerPresent
GetLastError
QueryPerformanceCounter
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
CreateThread
GetCurrentThreadId
IsProcessorFeaturePresent
GetVersion
GetTickCount
GetModuleHandleA
GetProcAddress
LockResource
GlobalSize
GlobalHandle
LocalFlags
MoveFileA
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
HeapSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

863ba274defc9a8f7cc146dac2f4a384

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 193KB - Virtual size: 192KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 6KB - Virtual size: 17KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 193KB - Virtual size: 192KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 6KB - Virtual size: 17KB

.reloc
Size: 14KB - Virtual size: 13KB