774d1c6fcefd71df2b2f5e8613ad809531de2af9d1aba457aa26d53d3bcb0b69

Sharing

Copy URL

Twitter E-mail

General

Target

774d1c6fcefd71df2b2f5e8613ad809531de2af9d1aba457aa26d53d3bcb0b69
Size

419KB
MD5

beeef9a99bd25b81e1fa08be7c945811
SHA1

8abfe875fceee101138323e78264701f15ea2d30
SHA256

774d1c6fcefd71df2b2f5e8613ad809531de2af9d1aba457aa26d53d3bcb0b69
SHA512

82bbc00ca7e84a3d76c67a18e4b2d601366ea229d445dbfe289dfd3b3712682c51ced54e9a5bd2d262e3d48686ad82c1969695b0c69f830d094c169e1e3d6062
SSDEEP

12288:v7QxQoS88hWB1zUa6SEINCFAxSUdkxwrrgtmu0/3kIdM1I5M9FO:z5o4h2v6feIpKkurLuU2Iuj

Score

N/A

Malware Config

Signatures

Files

774d1c6fcefd71df2b2f5e8613ad809531de2af9d1aba457aa26d53d3bcb0b69
.exe windows x86

56b5f781af7ac88b6733878774026d18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragAcceptFiles
SHEmptyRecycleBinA
SHGetPathFromIDList
SHGetFileInfo
ExtractAssociatedIconA
SHGetSpecialFolderPathA
SHFormatDrive
ExtractIconExW
ShellExecuteA
SHFreeNameMappings
ExtractIconExA
DoEnvironmentSubstA
SHGetSpecialFolderLocation
RealShellExecuteW

advapi32

CryptDestroyKey
CryptGetDefaultProviderA
CryptSetProviderW
CryptDuplicateHash
RegQueryInfoKeyA
StartServiceW
RegCloseKey
RegDeleteKeyA
DuplicateTokenEx
CryptGetHashParam
CryptGetProvParam
LookupSecurityDescriptorPartsW
AbortSystemShutdownW
CryptSignHashA
CryptDestroyHash
CryptHashSessionKey
CryptGetUserKey
LookupAccountSidW
RegSetKeySecurity
RegSetValueExW
CryptDuplicateKey
RegQueryValueW

comdlg32

PageSetupDlgW
ChooseFontW
GetFileTitleW
ChooseColorW
PrintDlgW

user32

SendNotifyMessageW
GetSysColorBrush
DdeAbandonTransaction
SetUserObjectInformationA
SetCursor
ImpersonateDdeClientWindow
SetClassLongW
DdeGetData
CallNextHookEx
CharLowerBuffW
RemovePropW
SetDebugErrorLevel
SetMessageExtraInfo
GetCapture
RegisterClassExA
EnumWindowStationsW
GetUpdateRect
SetMenu
DdeDisconnect
GetInputDesktop
RedrawWindow
DdeNameService
MonitorFromPoint
DrawIcon
GetPriorityClipboardFormat

kernel32

VirtualFree
WriteConsoleOutputAttribute
GetPrivateProfileStringW
GetSystemTimeAsFileTime
EnumDateFormatsA
InterlockedIncrement
IsBadReadPtr
DeleteCriticalSection
FreeEnvironmentStringsA
GetCurrentThreadId
RemoveDirectoryW
SetFilePointer
TlsGetValue
ExitProcess
GetStringTypeW
GetVersion
InitializeCriticalSection
GetFileType
GlobalUnlock
TlsAlloc
RtlMoveMemory
GetOEMCP
CloseHandle
WideCharToMultiByte
lstrcatW
FindResourceA
MoveFileExW
GetLastError
SetConsoleCtrlHandler
SetLastError
TlsSetValue
SleepEx
OutputDebugStringA
LeaveCriticalSection
InterlockedExchange
IsBadWritePtr
HeapCreate
TerminateProcess
GetModuleFileNameA
SetHandleCount
GetModuleHandleA
GetACP
GetCurrentThread
HeapFree
lstrcpyn
FindFirstFileExW
VirtualQuery
HeapDestroy
GetCPInfo
GetCommandLineA
FreeEnvironmentStringsW
ReadFile
HeapValidate
FlushFileBuffers
TlsFree
ReadConsoleOutputA
SetStdHandle
GetProcAddress
VirtualFreeEx
UnhandledExceptionFilter
RtlUnwind
GetEnvironmentStringsW
GetPrivateProfileIntA
DebugBreak
EnumResourceTypesA
LoadLibraryA
GetEnvironmentStrings
GetTickCount
QueryPerformanceCounter
GetStdHandle
GetStringTypeA
LCMapStringA
HeapReAlloc
EnterCriticalSection
GetCurrentProcess
LCMapStringW
CreateEventW
GetStartupInfoA
MultiByteToWideChar
GetCurrentProcessId
HeapAlloc
WriteFile
VirtualAlloc
LoadLibraryExA
FindFirstFileW
InterlockedDecrement
GetProcessHeap

wininet

GetUrlCacheGroupAttributeW
FindFirstUrlCacheContainerA
InternetAlgIdToStringA
FtpSetCurrentDirectoryA
InternetCheckConnectionA
HttpQueryInfoA
InternetGetConnectedStateExW
InternetWriteFileExW
InternetCrackUrlA
InternetSetFilePointer
InternetOpenW
RunOnceUrlCache
InternetCreateUrlW
InternetTimeToSystemTime
FtpGetFileEx
GetUrlCacheEntryInfoExA

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 274KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

56b5f781af7ac88b6733878774026d18

Headers

File Characteristics

Imports

shell32

advapi32

comdlg32

user32

kernel32

wininet

Sections

.text Size: 140KB - Virtual size: 139KB

.data Size: 274KB - Virtual size: 298KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 140KB - Virtual size: 139KB

.data
Size: 274KB - Virtual size: 298KB

.rsrc
Size: 4KB - Virtual size: 4KB