bd137ccd119fa70352cce999938d22bb1eeac6cc270ed50ee1b4c70c2d624803

Sharing

Copy URL

Twitter E-mail

General

Target

bd137ccd119fa70352cce999938d22bb1eeac6cc270ed50ee1b4c70c2d624803
Size

122KB
MD5

6faaf11f25dace2e99c23e468a9dfbdb
SHA1

dc78156d5af31117dfac46db7861d3ec5965e8a7
SHA256

bd137ccd119fa70352cce999938d22bb1eeac6cc270ed50ee1b4c70c2d624803
SHA512

57d15c14b23228d3602d8a0303f6f6b1a69d851a66345fdc7b05efdf3fe9a731ff94a379043fa0ec376be0637bc283600ef24daed5a252d81facb9c14cd3b995
SSDEEP

3072:XHVxAb7GuG+XV4FoZ0DINcCwyCTKkFJzs2Q+:XVUc+6Fo/cS+KkFJzK

Score

N/A

Malware Config

Signatures

Files

bd137ccd119fa70352cce999938d22bb1eeac6cc270ed50ee1b4c70c2d624803
.exe windows x86

15b02544af7fda486f0335bf2175621c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx

kernel32

UnhandledExceptionFilter
CloseHandle
CancelWaitableTimer
EnterCriticalSection
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetProcessVersion
GetStartupInfoW
LoadResource
GetTickCount
InitializeCriticalSection
ExitProcess
InterlockedExchange
CreateThread
LocalAlloc
InterlockedCompareExchange
GetSystemTimeAsFileTime
TerminateProcess
DeleteCriticalSection
LeaveCriticalSection
GetCurrentThreadId
LocalFree
FindResourceW
WaitForSingleObject
GetCurrentProcess
WideCharToMultiByte
FreeResource
GetLastError
LockResource
Sleep

shell32

CommandLineToArgvW
ShellExecuteExW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW

powrprof

CallNtPowerInformation

gdi32

SetBkColor
CreateFontIndirectW
SetTextColor
CreateSolidBrush
DeleteObject

user32

GetWindowTextLengthW
FindWindowExW
SetFocus
DialogBoxParamW
EndDialog
RegisterDeviceNotificationW
TranslateMessage
UnregisterClassW
GetParent
LoadStringW
RegisterClassExW
SetActiveWindow
UnregisterDeviceNotification
DestroyWindow
SendMessageW
GetSysColor
GetDlgItem
IsDlgButtonChecked
GetWindowTextW
CreateWindowExW
EnableWindow
SetDlgItemTextW
SetWindowLongW
GetMessageW
DefWindowProcW
CheckDlgButton
DispatchMessageW
SetTimer
SendDlgItemMessageW
GetDlgCtrlID
PostQuitMessage
GetWindowLongW
GetSysColorBrush
FindWindowW
ShowWindow
SetForegroundWindow
LoadIconW
SetWindowTextW
PostMessageW
KillTimer

uxtheme

CloseThemeData
GetThemeColor
OpenThemeData
GetThemeFont

crypt32

CryptEncodeObjectEx
CertEnumSystemStoreLocation
CryptEncodeObject

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

msvcrt

_XcptFilter
__p__fmode
_amsg_exit
memset
_wcmdln
_initterm
__set_app_type
__setusermatherr
_exit
__wgetmainargs
??3@YAXPAX@Z
_vsnwprintf
exit
wcstoul
_wcsicmp
_cexit
??2@YAPAXI@Z
__p__commode
?terminate@@YAXXZ
_controlfp

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15b02544af7fda486f0335bf2175621c

Headers

File Characteristics

Imports

ole32

kernel32

shell32

setupapi

powrprof

gdi32

user32

uxtheme

crypt32

wtsapi32

msvcrt

Sections

.text Size: 78KB - Virtual size: 78KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 38KB - Virtual size: 38KB

.rsrc Size: 1024B - Virtual size: 104KB

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 1024B - Virtual size: 104KB