5227117f3742474e0da4a7c19d72935fc3a2b2f1875a4430d56ae80fcfb5c35d

Sharing

Copy URL

Twitter E-mail

General

Target

5227117f3742474e0da4a7c19d72935fc3a2b2f1875a4430d56ae80fcfb5c35d
Size

323KB
MD5

4030ceb7c9ea72d03fe4e7a493bb20a9
SHA1

ef2f366d42c72ef2c369d4746afe35f978074e6a
SHA256

5227117f3742474e0da4a7c19d72935fc3a2b2f1875a4430d56ae80fcfb5c35d
SHA512

7cf39415a941e80284635c41d639aa614f864c3b34bfeb839386d1b20b6d25b64bed5def1d560d4a2946a3350700c3cc5ea9344780a78abdc26aabfefe6a85cb
SSDEEP

6144:ubxWVw0PN9y0nyKd4EwP3aYTiFFGaqNKAzS7fE:ubxWVwOnyKd4XqYRNKA8fE

Score

N/A

Malware Config

Signatures

Files

5227117f3742474e0da4a7c19d72935fc3a2b2f1875a4430d56ae80fcfb5c35d
.exe windows x86

47feefd6ebd069de0891a54f9ab2685c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardType
UnregisterClassA
UpdateWindow
VkKeyScanA
WaitForInputIdle
WindowFromPoint
CharToOemBuffA
CharUpperBuffA
ShowOwnedPopups
RedrawWindow
PostMessageA
PeekMessageA
OffsetRect
OemToCharBuffA
MoveWindow
MessageBoxA
LoadStringA
LoadImageA
LoadIconA
IsWindowVisible
GetWindowRect
GetSystemMetrics
GetParent
GetLastActivePopup
GetDlgItem
GetDC
ExitWindowsEx
EnumWindows
EndPaint
DispatchMessageA
DestroyWindow
DestroyIcon
DefWindowProcA
CreateWindowExA
CreateDialogParamA
CallNextHookEx
BeginPaint
wsprintfA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
SHBrowseForFolderA
SHGetPathFromIDListW

ole32

CreateBindCtx
CreateFileMoniker
GetRunningObjectTable

advapi32

RegOpenKeyExA
GetSecurityDescriptorOwner
GetSidIdentifierAuthority
GetUserNameA
GetUserNameW
RegCloseKey
RegQueryValueExA

gdi32

CreateDCA
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateFontIndirectW
CreatePalette
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
EnumFontFamiliesA
EnumFontFamiliesW
ExtCreatePen
ExtTextOutA
GetBkMode
GetCharWidthA
CreateCompatibleDC
GetDIBits
GetDeviceCaps
GetFontData
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetTextCharset
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextFaceW
GetTextMetricsA
OffsetClipRgn
PatBlt
CreateCompatibleBitmap
CreateBitmap
CombineRgn
Chord
BitBlt
Arc
GetCharWidthW
UpdateColors
TranslateCharsetInfo
TextOutW
TextOutA
StretchDIBits
SetTextColor
SetTextAlign
SetRectRgn
SetROP2
SetPolyFillMode
SetPaletteEntries
SetMapMode
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
ResizePalette
Rectangle
RectInRegion
RealizePalette
Polyline
Polygon
Pie
CreatePen

comctl32

InitCommonControlsEx

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

netapi32

NetUserAdd

kernel32

GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
RaiseException
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
SetFilePointer
CloseHandle
GetConsoleOutputCP
SetStdHandle
CreateFileA
ExitProcess
Sleep
GetModuleHandleA
HeapSize
InterlockedDecrement
GetCurrentThreadId
lstrlenW
lstrlenA
lstrcpynA
lstrcpyW
lstrcpyA
lstrcmpiA
WriteFile
WriteConsoleW
WriteConsoleA
GetSystemTimeAsFileTime
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47feefd6ebd069de0891a54f9ab2685c

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

version

netapi32

kernel32

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 23KB - Virtual size: 353KB

.ndata Size: 4KB - Virtual size: 4KB

.rsrc Size: 188KB - Virtual size: 187KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 23KB - Virtual size: 353KB

.ndata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 188KB - Virtual size: 187KB