202ab1a5c4d7809c216ff364842923ed5b133f652159147396e02c1f7fd06685

Sharing

Copy URL

Twitter E-mail

General

Target

202ab1a5c4d7809c216ff364842923ed5b133f652159147396e02c1f7fd06685
Size

604KB
MD5

0eff9e6701cb10ddc66f3d619dae7a36
SHA1

20a506351b97caef312b7f808638623512435c23
SHA256

202ab1a5c4d7809c216ff364842923ed5b133f652159147396e02c1f7fd06685
SHA512

41bc0934a29ae6f18804006ac9ff264ec1b41edc0bc2b312db4e24f14acd64a3c6f0838406c9d0d1d70ebc8aad7fb0b9a9882401e7e807aec95c999be9923c01
SSDEEP

12288:vV5ACC4Zly6ND8vBGHPACVAaalZdFq6Adjj9cACVAaalZdFq6Ad9u:vV5JCwtND8vBGHoEajOEajCu

Score

N/A

Malware Config

Signatures

Files

202ab1a5c4d7809c216ff364842923ed5b133f652159147396e02c1f7fd06685
.exe windows x86

83a2ac7707b4ac7b534e2a5efd88f255

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
LoadIconA
EnableWindow
SendMessageA
TrackPopupMenu
GetMenuItemRect
GetFocus
GetClipboardViewer
CopyAcceleratorTableW
LoadCursorFromFileA
LoadAcceleratorsA
GetMenuItemCount
ClipCursor
ChangeClipboardChain
GetKeyboardLayoutList
ShowCaret
SendNotifyMessageW
DrawTextExW
TranslateMessage
CreateWindowExW
FillRect
DestroyMenu
GetClipCursor
CharPrevA
DispatchMessageW
SetCaretPos
GetDlgItemTextA
PostQuitMessage
CharLowerBuffA
DdeQueryStringA
GetQueueStatus
GetSysColor
GetDlgCtrlID
ShowOwnedPopups
IsWindowEnabled
IsClipboardFormatAvailable
SetWindowLongA
EndDialog
keybd_event
ToAscii
PtInRect
CreatePopupMenu
DrawFrameControl
CheckMenuItem
RegisterWindowMessageA
EnumClipboardFormats
SetClassLongW
GetClassLongA
GetDlgItem
GetClipboardData
CharLowerW
GetDC
CharUpperBuffW
DrawStateA
GetCaretPos
MapVirtualKeyExA
SetRectEmpty
ReleaseDC
MapVirtualKeyW
PeekMessageW
SetWindowPos
MapWindowPoints
GetMessageW
DdeConnect
UnhookWindowsHook
CopyIcon
DdeDisconnect
InsertMenuA
GetPropA
LoadMenuW
MapVirtualKeyExW
MessageBoxExW
EnableMenuItem
UnionRect
IsMenu
PostMessageW
GetClassInfoW
CharToOemA
CreateDialogIndirectParamA
GetMenuItemID
DestroyCaret
DdeFreeStringHandle
PostMessageA
ValidateRgn
GetForegroundWindow
GetWindowThreadProcessId
LoadBitmapA
IsCharLowerA
GetLastActivePopup
CreateWindowExA
DrawStateW
GetKeyNameTextW
CharToOemBuffA
DdeCreateStringHandleW
GetClassNameA
FrameRect
VkKeyScanExA

advapi32

RegCloseKey
AllocateAndInitializeSid
QueryServiceConfig2A
InitiateSystemShutdownA
SetNamedSecurityInfoW
SetSecurityDescriptorSacl
ReadEventLogW
QueryServiceLockStatusW
LsaOpenPolicy
RegFlushKey
RegQueryInfoKeyA
RegisterServiceCtrlHandlerA
RegQueryMultipleValuesW
SetServiceObjectSecurity
SetThreadToken
RegQueryInfoKeyW
AddAce
ChangeServiceConfigW
SetTokenInformation
InitializeSecurityDescriptor
RegCreateKeyExA
LogonUserA
SetFileSecurityA
SetSecurityDescriptorGroup
OpenServiceA
RegOpenKeyExW
StartServiceCtrlDispatcherW
QueryServiceConfigA
CreateProcessAsUserA
OpenSCManagerA
InitializeSid
ReportEventA
RegOverridePredefKey
StartServiceW
LookupAccountSidA
DecryptFileW
QueryServiceConfigW
RegisterServiceCtrlHandlerW
RegEnumKeyW
StartServiceCtrlDispatcherA
EnumDependentServicesA
RegDeleteKeyW
RegSetValueExA
ChangeServiceConfigA
StartServiceA
GetLengthSid
GetServiceDisplayNameW
RegEnumKeyExA
GetEffectiveRightsFromAclW
FreeSid
ChangeServiceConfig2W
GetSidSubAuthorityCount
LookupPrivilegeValueA
AdjustTokenPrivileges
ImpersonateSelf
RegOpenKeyExA
GetFileSecurityW
RegDeleteValueW
RegNotifyChangeKeyValue
LookupPrivilegeValueW
GetSidSubAuthority
RegSetValueW
AddAccessAllowedAce
IsTokenRestricted
SetKernelObjectSecurity
GetSidLengthRequired
MakeSelfRelativeSD
SetEntriesInAclA
GetUserNameA
LsaRetrievePrivateData
LookupAccountNameA
RegReplaceKeyA
GetUserNameW
RevertToSelf
OpenEventLogW
RegUnLoadKeyW
DeleteService
CreateServiceW
QueryServiceLockStatusA
LockServiceDatabase
LsaFreeMemory
EnumServicesStatusA
PrivilegedServiceAuditAlarmA
LsaQueryInformationPolicy
CloseServiceHandle
ControlService
SetServiceStatus
GetServiceKeyNameW
RegConnectRegistryA
OpenProcessToken
ChangeServiceConfig2A
GetAce
RegCreateKeyA
RegCreateKeyW
ReportEventW
LsaAddAccountRights
EncryptFileW
GetSecurityDescriptorDacl
SetEntriesInAclW
SetFileSecurityW
RegisterEventSourceA
EnumDependentServicesW
QueryServiceStatus
RegSetKeySecurity
RegQueryValueW
CreateProcessAsUserW
RegSetValueA
GetKernelObjectSecurity
SetSecurityDescriptorDacl
OpenSCManagerW
RegLoadKeyA
RegQueryValueA
CopySid
MakeAbsoluteSD
RegCreateKeyExW
RegRestoreKeyW
ObjectCloseAuditAlarmW
RegSetValueExW
SetSecurityDescriptorOwner
GetSidIdentifierAuthority

msvcrt

_setmbcp
_Getmonths
__set_app_type
_wexecve
ldiv
__dllonexit
_onexit
frexp
_mbsncpy
_y1
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp

kernel32

GetModuleHandleA
GetThreadTimes
GetCurrentProcessId
GetDiskFreeSpaceExW
GetStartupInfoA
CreateConsoleScreenBuffer

imm32

ImmGetVirtualKey
ImmGetGuideLineA
ImmGetCompositionStringA
ImmUnregisterWordA
ImmSetCompositionStringA
ImmConfigureIMEA
ImmGetCompositionFontA
ImmGetCandidateListA

mfc42

ord4274
ord6375
ord4486
ord2554
ord1047
ord5731
ord3922
ord1089
ord1022
ord2396
ord3346
ord1050
ord5302
ord2725
ord1067
ord4698
ord5307
ord1093
ord5714
ord2982
ord1081
ord3259
ord4465
ord1091
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord1063
ord4080
ord1040
ord4424
ord3738
ord561
ord815
ord2514
ord641
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord1089
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord1092
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord1089
ord1045
ord1097
ord4627
ord4425
ord1084
ord324
ord4234
ord4710
ord1168
ord1064
ord755
ord470
ord2379
ord1576

Sections

.text
Size: 356KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83a2ac7707b4ac7b534e2a5efd88f255

Headers

File Characteristics

Imports

user32

advapi32

msvcrt

kernel32

imm32

mfc42

Sections

.text Size: 356KB - Virtual size: 352KB

.rdata Size: 216KB - Virtual size: 212KB

.data Size: 12KB - Virtual size: 2.8MB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 356KB - Virtual size: 352KB

.rdata
Size: 216KB - Virtual size: 212KB

.data
Size: 12KB - Virtual size: 2.8MB

.rsrc
Size: 16KB - Virtual size: 15KB