fe05d4e8514b8022701e051c7845e1b341611aff97a5d7f9610fd6b30a60cf08

Sharing

Copy URL Twitter E-mail

General

Target

fe05d4e8514b8022701e051c7845e1b341611aff97a5d7f9610fd6b30a60cf08
Size

196KB
MD5

385adf90fd5e2c4045e166125c380652
SHA1

01422e9d42d8b6477d18228f8f0ace33bc0a2104
SHA256

fe05d4e8514b8022701e051c7845e1b341611aff97a5d7f9610fd6b30a60cf08
SHA512

599b587b75070e2186aaf9261381287cd24418b01176674cffabf991325e5a0394e5af20015937c7285a061a99077433b583e853a09ccec55bdfb36593446bc4
SSDEEP

1536:ZVLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNyyriH4wkfdNcGAN28KD+YzGJQ:OvyrfbfWEPzU7fNSa2+eiH43fKZKfV

Score

N/A

Malware Config

Signatures

Files

fe05d4e8514b8022701e051c7845e1b341611aff97a5d7f9610fd6b30a60cf08
.exe windows x86

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrcatW
VirtualAlloc
HeapAlloc
GetProcessHeap
_lclose
WideCharToMultiByte
WaitForSingleObject
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrlenW
CloseHandle

user32

UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperA
CharNextA
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsZoomed

gdi32

DeleteMetaFile
DeleteObject
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
CreatePatternBrush
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
CreateSolidBrush
RestoreDC
CloseMetaFile
CreatePalette
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen

advapi32

RegQueryValueExW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

winmm

timeGetTime

msvcrt

memset
memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a0
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 1024B - Virtual size: 1020B

.a0 Size: 20KB - Virtual size: 19KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 1024B - Virtual size: 1020B

.a0
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 39KB - Virtual size: 39KB