542c9e6ed09b126cff1d4860a5b7f3e012e0410dec11d6068b1e2a6beaa60007

Sharing

Copy URL Twitter E-mail

General

Target

542c9e6ed09b126cff1d4860a5b7f3e012e0410dec11d6068b1e2a6beaa60007
Size

150KB
MD5

49e82fdaa60b57a672e682c8a879159b
SHA1

73e4a230cbb6d79fb366da12558be52ad4294df9
SHA256

542c9e6ed09b126cff1d4860a5b7f3e012e0410dec11d6068b1e2a6beaa60007
SHA512

80ec22b43040f73a6f63c4e0732986ddebe8f8890be04f4ae30b6fd3446c6adec10a07a1c4959c737f9f3cd89c3bcfef9644bbed097c1a3340048eead99fbdad
SSDEEP

3072:gskLCpoh2I5iV4opDQry+kAozTSk8n3CXvDpj:JSh2I5Dg0IAs+3CXLB

Score

N/A

Malware Config

Signatures

Files

542c9e6ed09b126cff1d4860a5b7f3e012e0410dec11d6068b1e2a6beaa60007
.exe windows x86

e9b40ac8103cdcd86a73dc382536c44c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
RegisterClassExA
DefDlgProcA
GetSysColor
LoadIconA
SetTimer
KillTimer
IsDlgButtonChecked
GetDlgItemTextA
SetFocus
SetWindowTextA
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
CheckDlgButton
ShowWindow
SetForegroundWindow
CharLowerA
CharUpperA
CharNextA
EnableWindow
DialogBoxParamA
SetDlgItemTextA
EndDialog
GetDlgItem
SendDlgItemMessageA
SetWindowPos
GetDesktopWindow
GetWindowRect
MoveWindow
SendMessageA
GetForegroundWindow
MessageBoxExA
FindWindowA
GetProcessDefaultLayout
IsZoomed
NotifyWinEvent
GetTopWindow
IsCharAlphaNumericA
GetWindowLongW
DrawIcon
MapVirtualKeyExW
GetDlgCtrlID

shell32

ShellExecuteA
Shell_NotifyIconA

advapi32

OpenSCManagerA
StartServiceA
ControlService
DeleteService
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
OpenServiceA
ChangeServiceConfigA
UnlockServiceDatabase
LockServiceDatabase
GetUserNameA
CloseServiceHandle
RegDeleteKeyA
QueryServiceStatus

gdi32

ExtTextOutW
OffsetClipRgn
EnumObjects
GetOutlineTextMetricsW
CreatePolygonRgn
GetObjectA
SetRectRgn
PolylineTo
ExtSelectClipRgn
GetGraphicsMode
CreateSolidBrush
CreateFontA
SetTextColor
ResetDCW
GetBrushOrgEx
SetBkMode

comctl32

InitCommonControlsEx

kernel32

VirtualFree
HeapCreate
InterlockedDecrement
HeapFree
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
DisconnectNamedPipe
GetProcessIoCounters
GetWriteWatch
SetCommMask
ReplaceFileA
HeapAlloc
GetProcessHeap
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9b40ac8103cdcd86a73dc382536c44c

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

advapi32

gdi32

comctl32

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 22KB - Virtual size: 41KB

.rsrc Size: 61KB - Virtual size: 60KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 22KB - Virtual size: 41KB

.rsrc
Size: 61KB - Virtual size: 60KB