c248190a5b39487eb99a0cd761099b7a4d46d7a414a7f5479811372b299e9887

Sharing

Copy URL Twitter E-mail

General

Target

c248190a5b39487eb99a0cd761099b7a4d46d7a414a7f5479811372b299e9887
Size

232KB
MD5

8f9784bc4cf1d15d0de904deef14f9ac
SHA1

702ea385e75e82dd8f44570a935d9ff7cda9f0bc
SHA256

c248190a5b39487eb99a0cd761099b7a4d46d7a414a7f5479811372b299e9887
SHA512

a41158a79a63a28ed358bdc1b3f23979b8b676d4c9fd2dbf9f88decb4f7b6019bb4b113ff5a05459c6a01411084d44fbd578cd18d56e48d8d2cc4c9b2afcddca
SSDEEP

6144:fIn47fQCW9VDJsVPDyi0AvCfNbHeMS+2k:fS4ZK2dCZO+

Score

N/A

Malware Config

Signatures

Files

c248190a5b39487eb99a0cd761099b7a4d46d7a414a7f5479811372b299e9887
.exe windows x86

7a9179f976acb178805e8b29981222e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetVersion
GetStdHandle
GetVersionExA
GetLastError
lstrcpyA
GetModuleFileNameA
CreateEventA
LocalReAlloc
LocalAlloc
lstrlenA
GetCommandLineW
CloseHandle
GetModuleHandleA
FindResourceA
VirtualAllocEx
LoadLibraryA
lstrcmpA
GetCurrentThreadId
GlobalFindAtomA
lstrlenW
GlobalAlloc
FreeResource
GetStringTypeA
GetCommandLineA
ExitThread
GetFileSize
ExitProcess
Sleep
GetThreadLocale
GetProcAddress
IsBadReadPtr

user32

WindowFromPoint
ShowScrollBar
SetTimer
GetFocus
LoadKeyboardLayoutA
EnableMenuItem
GetWindowRect
SetParent
CreateIcon
GetParent
GetCapture
LoadStringA
SendMessageA
GetDesktopWindow
GetIconInfo
UpdateWindow
GetScrollPos
EqualRect
FillRect
DestroyIcon
TrackPopupMenu
GetMessagePos
SetWindowPos
DrawTextA
GetMenu
IntersectRect
DefFrameProcA
LoadCursorA
ClientToScreen
UnhookWindowsHookEx
OffsetRect
ScrollWindow
GetKeyboardLayoutList
SetWindowTextA
PtInRect
CharLowerBuffA
ActivateKeyboardLayout
GetDC
GetKeyboardLayout
EnableScrollBar
IsIconic
GetMenuItemID
GetCursor
GetClassInfoA
KillTimer
GetKeyboardState
OpenClipboard
OemToCharA
GetClientRect
GetMenuState
GetWindowLongW
WaitMessage
DrawAnimatedRects
SendMessageW
GetWindowLongA
DestroyCursor
LoadIconA
RegisterClipboardFormatA
GetPropA
TranslateMDISysAccel
CreateMenu
DestroyWindow
SetCapture
SetCursor
AdjustWindowRectEx
GetKeyboardType
SetClassLongA
GetDlgItem
RegisterWindowMessageA
CallWindowProcA
CharNextW
GetDCEx
GetWindowThreadProcessId
ChildWindowFromPoint
GetClassLongA
CreateWindowExA
SetWindowLongW
CharLowerA
ReleaseCapture
IsDialogMessageW
IsDialogMessageA
DrawFrameControl
GetClipboardData
DispatchMessageA
MessageBoxA
DrawIcon
ScreenToClient
CallNextHookEx
GetActiveWindow
UnregisterClassA
GetScrollInfo
GetSubMenu
FindWindowA
RegisterClassA
SetScrollInfo
GetKeyState
IsWindow
InsertMenuItemA
BeginPaint
SetActiveWindow
DefWindowProcA
EndPaint
InvalidateRect
SetMenuItemInfoA
GetSystemMenu
PostMessageA
SystemParametersInfoA
GetWindow
InsertMenuA
RedrawWindow
TranslateMessage
CharToOemA
DrawEdge
IsWindowUnicode
MapVirtualKeyA
MapWindowPoints
SetClipboardData
PeekMessageA
GetMenuItemCount
MsgWaitForMultipleObjects
SetScrollRange
PeekMessageW
EnumChildWindows
GetWindowDC
GetMenuStringA
MoveWindow
wsprintfA
EnumThreadWindows
GetForegroundWindow
MessageBeep
DestroyMenu
DispatchMessageW
InflateRect
CharNextA
SetFocus
GetKeyNameTextA
SetRect
SetForegroundWindow
CharUpperBuffA
FrameRect
SetWindowLongA
PostQuitMessage
GetWindowPlacement
EnumWindows
GetLastActivePopup
SetWindowsHookExA
SetPropA
DrawIconEx
SetWindowPlacement
SetScrollPos
IsZoomed
IsChild
DrawMenuBar
IsRectEmpty
CheckMenuItem
GetMenuItemInfoA
DeleteMenu
LoadBitmapA
GetWindowTextA
CreatePopupMenu
SetMenu
ShowWindow
IsWindowEnabled
GetSystemMetrics
CloseClipboard
ShowOwnedPopups
GetKeyboardLayoutNameA
GetClassNameA
GetScrollRange
GetSysColor
DefMDIChildProcA
IsWindowVisible
GetCursorPos

gdi32

GetPaletteEntries
GetPixel
GetDIBColorTable
GetRgnBox

ole32

CLSIDFromString
CoGetMalloc
MkParseDisplayName
CreateBindCtx
CoTaskMemFree
CoGetContextToken
CoCreateFreeThreadedMarshaler

shell32

SHGetFolderPathA

Sections

CODE
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc6
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc3
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a9179f976acb178805e8b29981222e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

shell32

Sections

CODE Size: 74KB - Virtual size: 73KB

.data Size: 145KB - Virtual size: 144KB

.rsrc1 Size: 1024B - Virtual size: 618B

.rsrc4 Size: 1KB - Virtual size: 1KB

.rsrc0 Size: 6KB - Virtual size: 5KB

.rsrc6 Size: 1024B - Virtual size: 682B

.rsrc3 Size: 1024B - Virtual size: 810B

.rsrc Size: 1024B - Virtual size: 984B

CODE
Size: 74KB - Virtual size: 73KB

.data
Size: 145KB - Virtual size: 144KB

.rsrc1
Size: 1024B - Virtual size: 618B

.rsrc4
Size: 1KB - Virtual size: 1KB

.rsrc0
Size: 6KB - Virtual size: 5KB

.rsrc6
Size: 1024B - Virtual size: 682B

.rsrc3
Size: 1024B - Virtual size: 810B

.rsrc
Size: 1024B - Virtual size: 984B