ea408e0e667b1f6fe2d39a7b4e3c10ae01779a5e7f23128bb8ee9ba3e261b801

Sharing

Copy URL Twitter E-mail

General

Target

ea408e0e667b1f6fe2d39a7b4e3c10ae01779a5e7f23128bb8ee9ba3e261b801
Size

481KB
MD5

6f97185421f6487019b3ebcc5e08e4b0
SHA1

4cd1b9e1618ca341c24504acb03a7a0ef156d932
SHA256

ea408e0e667b1f6fe2d39a7b4e3c10ae01779a5e7f23128bb8ee9ba3e261b801
SHA512

7cb35bf961e14e8ce6b41d962290d827391736dd74705dda3b20121e61031af6ed57e2167670852123106adeca353a5a043b6f70feed0ad0ef4c7b611620448b
SSDEEP

12288:fkikTwLiscmMgQMT4d6QROcMQuVLmywa6I:4wLvcmrbEUwPuVLXwa

Score

N/A

Malware Config

Signatures

Files

ea408e0e667b1f6fe2d39a7b4e3c10ae01779a5e7f23128bb8ee9ba3e261b801
.exe windows x86

694acff0be4573cd346580045688649a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

InvalidateRect
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SendMessageA
DefWindowProcA
AppendMenuA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
ShowWindow
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow

shell32

SHGetSpecialFolderLocation
ShellExecuteA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SetBkColor

comctl32

ImageList_Destroy
ImageList_Create
ImageList_AddMasked

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
LCMapStringA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetOEMCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetModuleHandleW
GetLocaleInfoA
WideCharToMultiByte
GetLogicalDrives
ExitProcess
GetWindowsDirectoryA
SetFileTime
SetErrorMode
CreateIoCompletionPort
FlushInstructionCache
GetProcessTimes
GetNamedPipeHandleStateW
GetCommandLineA
LocalUnlock
GetFileInformationByHandle
PulseEvent
IsWow64Process
ConvertFiberToThread
FindNextChangeNotification
GetCurrentThread
GetFileAttributesExW
FindFirstFileExW
GetProcessHeap
FreeResource
LocalShrink
GetCommTimeouts
GetCurrentProcessId
GetFileType
GetCommMask
EncodeSystemPointer
CreateTapePartition
SetMessageWaitingIndicator
GetMailslotInfo
GetCommandLineW
GetTempPathA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
SetFilePointer
MulDiv
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
lstrcmpA
lstrcmpiA
CloseHandle
GetVersion
GetSystemDirectoryA
lstrcatA
lstrlenA
GetTempFileNameA
CreateFileA
RemoveDirectoryA
CreateProcessA
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceA
lstrcpynA
LoadLibraryA

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

694acff0be4573cd346580045688649a

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

version

kernel32

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 362KB - Virtual size: 362KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 362KB - Virtual size: 362KB

.reloc
Size: 5KB - Virtual size: 5KB