5f1028b0fea80bd84fbcda61c211e80b46156849d20a05ca43420a971f4a01a5

Sharing

Copy URL Twitter E-mail

General

Target

5f1028b0fea80bd84fbcda61c211e80b46156849d20a05ca43420a971f4a01a5
Size

99KB
MD5

ebaec261fd46c5e12ec99b31229b618b
SHA1

1dee69fc5d301ba2dc77704fc8c15c3144078bb4
SHA256

5f1028b0fea80bd84fbcda61c211e80b46156849d20a05ca43420a971f4a01a5
SHA512

68064996e7ceae206aa8827ca2b8eeeafa37533fdbed16c8278d1c94158f515d6a7c646c86356e708edc674bbac3165487f3b25ecd85ee40dca45e3d23c1f625
SSDEEP

3072:DXn9NZw90ygWR9XnZyYULTra/AMWEYL/wmGj:xc903I6tbEvWvwRj

Score

1^/10

Malware Config

Signatures

Files

5f1028b0fea80bd84fbcda61c211e80b46156849d20a05ca43420a971f4a01a5
.exe windows x64

578cfbd06ee8b1f7fcdb6caf9b4e562d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

InitCommonControlsEx

kernel32

Sleep
GlobalFree
ReadFile
GlobalAlloc
GetMailslotInfo
CreateEventA
CreateMutexA
CreateThread
GetCurrentProcess
GetVersionExA
GetComputerNameA
FlushFileBuffers
CreateFileA
HeapReAlloc
CreateMailslotA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
MultiByteToWideChar
HeapSize
GetOEMCP
GetACP
LocalUnlock
LocalLock
LocalAlloc
GetEnvironmentVariableA
LocalFree
GetLastError
CloseHandle
GetCPInfo
GetConsoleMode
HeapFree
HeapAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSetInformation
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlVirtualUnwind
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
SetFilePointer
GetConsoleCP

user32

LoadMenuA
ShowWindow
GetProcessWindowStation
EnumDesktopsW
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefFrameProcA
MessageBoxA
GetWindowLongA
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
GetParent
GetSubMenu
SendMessageA
EnableMenuItem
DrawMenuBar
GetClientRect
MoveWindow
DefMDIChildProcA
MessageBoxW

gdi32

GetStockObject

advapi32

CloseServiceHandle
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA

shell32

Shell_NotifyIconA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

578cfbd06ee8b1f7fcdb6caf9b4e562d

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 5KB