f1b2446558e35df613366ca1bff2e0120113e21aa593c4f1f449f1e554d1dc3e

Sharing

Copy URL

Twitter E-mail

General

Target

f1b2446558e35df613366ca1bff2e0120113e21aa593c4f1f449f1e554d1dc3e
Size

286KB
MD5

2ea0561bb3cdae9cf682703de2933a43
SHA1

827696cf98926dea8bfde038de228b7778d0ff56
SHA256

f1b2446558e35df613366ca1bff2e0120113e21aa593c4f1f449f1e554d1dc3e
SHA512

e6fac7e489e967cb2174016e3236b0acfe60625b8286bc35dd35c0c5cd5716b284891f68033b05b211380dd135aabd93ff25e18ed8ddeb0c536e29bbc7f92cdb
SSDEEP

6144:FBeVV56G+JCBe35SVPilxd50wX2n9RzozaFCu6/u3W:FBgVNPwdR2oOkuku3W

Score

N/A

Malware Config

Signatures

Files

f1b2446558e35df613366ca1bff2e0120113e21aa593c4f1f449f1e554d1dc3e
.exe windows x86

da27de2c264a7f6fc6f2b5332e7c96c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

winscard

SCardControl

user32

CreateWindowExW
GetCursorPos
DestroyWindow
DefWindowProcW
GetActiveWindow
SetActiveWindow
DrawFocusRect
PtInRect
ReleaseCapture
ReleaseDC
SetWindowLongW
SetTimer
SetCapture
CheckMenuItem
RegisterClassW
LoadIconA
SetWindowPos
GetSubMenu
TrackPopupMenu
InflateRect
OffsetRect
SetWindowTextW
MoveWindow
GetMenu
GetClientRect
MessageBeep
SendMessageW
DestroyIcon
PostMessageW
CreateWindowExA
ClientToScreen
UnregisterClassA
DestroyMenu
LoadStringW

kernel32

CompareStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
GetLocaleInfoW
WideCharToMultiByte
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapReAlloc
HeapAlloc
InitializeCriticalSection
LoadLibraryExA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
OutputDebugStringA
Sleep
GetOEMCP
CompareStringW
GetCPInfo
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
VirtualAlloc
GetCommandLineA
GetCurrentThread
IsDebuggerPresent
GetEnvironmentStringsW
GetLastError
GetProcAddress
LoadLibraryW
GetVersionExA
GetEnvironmentStrings
TerminateProcess
CloseHandle
ExitProcess
GetCommandLineW
LCMapStringW
InterlockedIncrement
lstrlenW
CreateMutexW
GetVersionExW
GetACP
GetStartupInfoW
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
RtlUnwind
SetEnvironmentVariableA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy

advapi32

RegCreateKeyExA

ole32

OleCreate
OleInitialize
CoUninitialize

Sections

.text
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da27de2c264a7f6fc6f2b5332e7c96c8

Headers

DLL Characteristics

File Characteristics

Imports

winscard

user32

kernel32

advapi32

ole32

Sections

.text Size: 255KB - Virtual size: 254KB

.data Size: 29KB - Virtual size: 28KB

.rsrc Size: 1024B - Virtual size: 680B

.text
Size: 255KB - Virtual size: 254KB

.data
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 1024B - Virtual size: 680B