4f9a54a00088e78cae65d6f8a9cf4a2954210b7e3fb84175fcf52689110dbbe5

Sharing

Copy URL Twitter E-mail

General

Target

4f9a54a00088e78cae65d6f8a9cf4a2954210b7e3fb84175fcf52689110dbbe5
Size

301KB
MD5

8e10daf230b7333bc2c4dd3fd913aa2d
SHA1

ace34b727e31e7f7519b490d69ffcfef58b69ec1
SHA256

4f9a54a00088e78cae65d6f8a9cf4a2954210b7e3fb84175fcf52689110dbbe5
SHA512

6868b20d4f685356e9ab70da7d3d9704d326e16dec08bf7e716add25ffcba30652d264e1cc2a3151f41e20e121fe981c0e9263e3ec4f69a4084d7b3dc2558e96
SSDEEP

3072:g26rZY0ceaYt2n3b4T4Aih7SNkMzHSmqD6Ks28QKqMORoj8oY46H+7kMmgvC9zp:gHrZ1VvtIsk5h7SeMzymRhq9ohaGUz

Score

1^/10

Malware Config

Signatures

Files

4f9a54a00088e78cae65d6f8a9cf4a2954210b7e3fb84175fcf52689110dbbe5
.exe windows x64

8d3857e2bb1a29f55d67c859b068c154

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetFilePointerEx
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SetStdHandle
GetConsoleMode
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetFileType
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
CreateFileW
WriteConsoleW
GlobalUnlock
SystemTimeToFileTime
GlobalLock
GlobalAlloc
LocalFileTimeToFileTime
GetCurrentThreadId
lstrlenW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryExW
FreeLibrary
TlsFree
FreeEnvironmentStringsW
GetModuleHandleW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
CompareStringEx
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue

user32

GetMenuState
PostMessageW
GetMenu
GetDC
SendMessageW
GetSubMenu
OpenClipboard
CreateIconIndirect
CloseClipboard
GetDlgItemTextW
DestroyMenu
GetClipboardData
LoadIconW
SetParent
SetClipboardData
CheckMenuItem
KillTimer
RegisterWindowMessageW
SetForegroundWindow
IsIconic
ReleaseDC
GetMenuItemInfoW
InsertMenuItemW
SetWindowPos
SetWindowRgn
CreatePopupMenu
TrackPopupMenu
SetTimer
SetMenuItemInfoW
SetDlgItemTextW
GetClientRect
CreateDialogParamW
GetWindowRect
DestroyWindow
IsWindowVisible
GetPropW
SetWindowLongPtrW
ShowWindow
MoveWindow
SetPropW
GetDesktopWindow
DialogBoxParamW
MessageBoxW
EndDialog
GetDlgItem
GetParent
GetCursorPos

gdi32

DeleteDC
DeleteObject
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
PatBlt
CreateFontW
CreateSolidBrush
TextOutW
SetTextColor
SetBkColor
CreateRoundRectRgn
SetBkMode

shell32

ShellExecuteW
Shell_NotifyIconW

imm32

ImmDisableIME

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d3857e2bb1a29f55d67c859b068c154

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

imm32

Sections

.text Size: 192KB - Virtual size: 192KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 192KB - Virtual size: 192KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 2KB