343633358da6c5c805b910474eeb75ee5205e497ac379bef91416d718a01c383

Sharing

Copy URL Twitter E-mail

General

Target

343633358da6c5c805b910474eeb75ee5205e497ac379bef91416d718a01c383
Size

51KB
MD5

3a759fc7abf2e56e900a20c7c076522c
SHA1

f0fa8397441188a6cab68e7148443bc23c683ff9
SHA256

343633358da6c5c805b910474eeb75ee5205e497ac379bef91416d718a01c383
SHA512

d3f51201383ddc032ecc31622b2131af38299d3d55498d082b179fe5f1ed005279b91cf9377bb6bc60c70182d8293dda5ce8fb73e47db32ef180458e01f4816c
SSDEEP

768:s1cLhhfsE+1LsBG6AgNCMC0rWIAbpAtkUD4Ceh2VTqM:s2LiLKvjNCMWA62R

Score

N/A

Malware Config

Signatures

Files

343633358da6c5c805b910474eeb75ee5205e497ac379bef91416d718a01c383
.exe windows x86

26af74e73a5684352073e779a4eb0c18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_LoadImageW
ImageList_GetIcon
CreateStatusWindowW
ImageList_AddMasked
ImageList_Write
ImageList_GetIconSize

kernel32

FindResourceW
CallNamedPipeW
FileTimeToLocalFileTime
OpenFileMappingA
GlobalAlloc
GetCommandLineW
GetLongPathNameW
CreateNamedPipeA
SetLocalTime
FreeResource
SetUnhandledExceptionFilter
LocalLock
MoveFileA
GetUserDefaultLangID
GetCommandLineA
DisconnectNamedPipe
GetShortPathNameA
Sleep
GetBinaryTypeA
EnterCriticalSection
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
LoadLibraryExA
SetFileTime
EscapeCommFunction
SetThreadPriority
TlsGetValue
GetLocaleInfoW
GlobalMemoryStatus
lstrcatA
OpenFileMappingW
ExitThread
CreateDirectoryA
SleepEx
GlobalMemoryStatusEx
GetNumberFormatA
EnumResourceNamesW
GlobalGetAtomNameA
SetLastError
TerminateThread
IsValidLanguageGroup
CompareStringW
LocalSize
GlobalFlags
IsBadCodePtr
SetErrorMode
CompareStringA
UnlockFile
LoadLibraryA
lstrlenA
IsBadReadPtr
FindNextChangeNotification
EnumResourceNamesA
LoadResource
WaitForMultipleObjects

shlwapi

StrToIntW

msvcrt

clearerr
iswspace
strcspn
iswdigit
fprintf
strcpy
isalnum
sprintf
swscanf
putchar
_controlfp
iswxdigit
atol
strerror
system
__set_app_type
__p__fmode
malloc
wcslen
wcsrchr
wcstod
strtol
__p__commode
_amsg_exit
iswctype
strtok
fread
strcoll
fgets
wcsncpy
_initterm
wcstok
_ismbblead
printf
setlocale
_XcptFilter
qsort
isalpha
tolower
gets
_exit
_cexit
__setusermatherr
__getmainargs
fclose
wcstombs
wcstoul

user32

IsWindowUnicode
OpenIcon
GetWindowDC
ReplyMessage
InSendMessage
DrawFocusRect
GetDlgCtrlID
FindWindowW
ShowWindow
SetMenu
RegisterHotKey
CharLowerW
GetMenuStringW
GetMenuItemCount
GetMenuItemRect
CreateCaret
BeginDeferWindowPos
GetClassInfoExW
RegisterWindowMessageA
LockWindowUpdate
IsWindowEnabled
LoadAcceleratorsA
CharToOemBuffA
FindWindowExA
SetParent
TileWindows
DispatchMessageA
OffsetRect
AttachThreadInput
GetClassInfoExA
MonitorFromPoint
RedrawWindow
CloseDesktop
ShowCursor
SetTimer
TranslateAcceleratorA
GetWindowTextA
GetSystemMetrics
SetRect
CharLowerA
AppendMenuA
CheckRadioButton
LoadImageA
FrameRect
SetSysColors
CreateDialogIndirectParamW
MessageBoxW
DefDlgProcW
CharPrevW
SwitchToThisWindow
CreatePopupMenu
SendDlgItemMessageW
ClientToScreen
InsertMenuW
AdjustWindowRect
EnableScrollBar
KillTimer
CreateIconFromResource
SetWindowLongW
GetKeyboardLayoutNameW
DrawFrameControl
EqualRect
GetScrollRange
CreateIconIndirect
GetMonitorInfoW
CreateWindowExA
GetMessageW
ExitWindowsEx
DestroyWindow
WaitMessage
DestroyCursor
VkKeyScanW
LoadStringA
SendMessageW
GetMessageTime
LookupIconIdFromDirectory
GetNextDlgGroupItem
GetCaretPos
GetMessageExtraInfo
DrawMenuBar
ReleaseDC
InSendMessageEx
GetCursorPos
InflateRect
GetAsyncKeyState
SendMessageA
ChildWindowFromPoint
RegisterClassExW
UpdateWindow
GetMenuItemInfoW
LoadCursorW
CharToOemA
ShowWindowAsync
IsChild
GetScrollPos
IsIconic
GetWindowTextW
GetClassNameW
DrawStateA
GetMenuStringA
ActivateKeyboardLayout
wvsprintfA
CreateCursor
SetDlgItemTextA
GetUpdateRect
GetKeyboardType
CopyAcceleratorTableW
wsprintfA
EnumThreadWindows
DeleteMenu
SendMessageTimeoutW
ChangeMenuW
SetActiveWindow
wsprintfW
IsCharAlphaW
ShowOwnedPopups
WaitForInputIdle

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26af74e73a5684352073e779a4eb0c18

Headers

File Characteristics

Imports

comctl32

kernel32

shlwapi

msvcrt

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 444B

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 444B

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 1KB - Virtual size: 1KB