162ac985a72637ee8482f3fec898f568e5057657f4f5755a65712713309fdd70

Sharing

Copy URL Twitter E-mail

General

Target

162ac985a72637ee8482f3fec898f568e5057657f4f5755a65712713309fdd70
Size

128KB
MD5

27c969e35a9e25571f1967a81ae0786a
SHA1

e6032436ad070381c4ce2b2be7b2d5b1c7dd76ff
SHA256

162ac985a72637ee8482f3fec898f568e5057657f4f5755a65712713309fdd70
SHA512

c385aaf216b43629963fd27574543f0df70b52f7074c9e4154cb6d85fca9c6aeab6edc0498bcc0ff42e1dd59bfe4971c3241f36e1ef59a0efa53b6d5c1ca011a
SSDEEP

1536:zO0T94fDp6BqJL5jd1R284atEkRRf5T5v8G2bjtrYVS/9C6nX/qtVPdo2SxK3xcw:zr9+nU84aBRR0bRZ9DnPqPPdoRYxcQ

Score

N/A

Malware Config

Signatures

Files

162ac985a72637ee8482f3fec898f568e5057657f4f5755a65712713309fdd70
.exe windows x86

f6b775194a4904e37f891377f9cc32d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
LocalFree
FormatMessageA
GetLastError
Sleep
GetLocalTime
GetTickCount
GetModuleHandleA
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
LocalAlloc
GetCurrentProcess
InterlockedExchange
SetLastError
CreateProcessA
GetPrivateProfileStringA
GetModuleFileNameA
lstrcatA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetOEMCP
GetACP
LCMapStringW
LoadLibraryA
MultiByteToWideChar
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
ReadFile
SetUnhandledExceptionFilter
LeaveCriticalSection
OutputDebugStringA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
LCMapStringA
lstrcpynA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapSize
HeapReAlloc
TerminateProcess
TlsGetValue
TlsAlloc
TlsSetValue
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentThreadId
SetEnvironmentVariableA

user32

wsprintfA
SetWindowTextA
ScreenToClient
GetCursorPos
MessageBoxA
PtInRect
GetActiveWindow
SetWindowPos
GetDesktopWindow
GetWindowRect
SetWindowLongA
ChangeDisplaySettingsA
EndDialog
DefWindowProcA
ShowCursor
DialogBoxParamA
DestroyWindow
RegisterHotKey
UnregisterHotKey
PostQuitMessage
LoadStringA
LoadIconA
RegisterClassExA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
GetMenu
AdjustWindowRectEx
MoveWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumDisplaySettingsA
LoadCursorA
WindowFromPoint
GetClientRect
SetCursor
GetDC
ReleaseDC
GetWindowPlacement
SetMenu
ShowWindow
UpdateWindow

gdi32

GetStockObject

advapi32

GetTokenInformation
FreeSid
OpenProcessToken

winmm

timeGetTime

wndsys

?CreateFontA@XFontCreate@@QAEPAUITTFont@@PBDHHHHHH@Z
?GetInstance@XFontCreate@@SAPAV1@XZ
?GetCurrentCursor@XDesktop@@QAEPAVXCursor@@XZ
?GetInstance@XDesktop@@SAPAV1@XZ

ijl15

ord5
ord2
ord3

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6b775194a4904e37f891377f9cc32d9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winmm

wndsys

ijl15

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 8KB - Virtual size: 7KB