ab0281edecb98ae43a05cf1ed9a3bbf082d067effd1093f39cf2b66a2f0415e5

Sharing

Copy URL

Twitter E-mail

General

Target

ab0281edecb98ae43a05cf1ed9a3bbf082d067effd1093f39cf2b66a2f0415e5
Size

86KB
MD5

75090bb2010183f69431930620fc2810
SHA1

577bcd90d68790c4c1c60eb5df768c6eafae3a8f
SHA256

ab0281edecb98ae43a05cf1ed9a3bbf082d067effd1093f39cf2b66a2f0415e5
SHA512

d924c4870dd352f39fda65f35ba7ba6cd2a8d74aa9e4deb7a6a72e7b7b46080c9896aefdef7541e6dc72c8b17b525e533d1ec6a1d01dddb60867ad3d3e5a6bb8
SSDEEP

1536:RucaS9mhEf8+ptUSjqFMaztleruMV1yPMR3pLLJZweL+C+2V5NPXhO:JjTlCttleruqyPMZBLJOrjYJXh

Score

N/A

Malware Config

Signatures

Files

ab0281edecb98ae43a05cf1ed9a3bbf082d067effd1093f39cf2b66a2f0415e5
.exe windows x86

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

InitAtomTable
lstrcpynW
HeapValidate
GetFileAttributesW
MulDiv
TerminateProcess
IsDBCSLeadByte
CreateFileW
lstrlenW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
UnhandledExceptionFilter
LockResource
CreateEventW
SizeofResource
FoldStringW
GetModuleHandleA
LoadLibraryExA
HeapSetInformation
CreateMutexA
IsDebuggerPresent
GetStringTypeW
PurgeComm
ReleaseMutex
DeleteFileW
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
LoadLibraryW
WideCharToMultiByte
GetTickCount
GlobalLock
HeapFree
GetCurrentActCtx
SystemTimeToFileTime
LoadResource
IsProcessorFeaturePresent
VirtualQuery
GetCPInfo
UnmapViewOfFile
MapViewOfFile
FindResourceA
CreateMutexW
GetDateFormatW
PostQueuedCompletionStatus
GetCommandLineW

user32

LoadIconW
RegisterClassExW
ChildWindowFromPoint
DrawFocusRect
GetCapture
GetDC
wsprintfW
PtInRect
EnumWindows
GetClassLongW
SetFocus
UnhookWinEvent
FindWindowW
WindowFromPoint
MessageBeep
CallNextHookEx
LoadCursorW
GetKeyState
IsZoomed
PostMessageW
SetCapture
FillRect
RegisterWindowMessageW
GetMessageW
ScreenToClient
DestroyWindow
ClientToScreen
OffsetRect
InvalidateRect
SetScrollPos
GetDlgItem
CharUpperW
SetWindowsHookExA
SetWindowPos
SendMessageTimeoutW
CreateDialogParamW
OpenClipboard
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
IsWindowVisible
SetDlgItemTextW
MapWindowPoints
EnableWindow
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
SetWindowsHookExW

gdi32

GetTextMetricsW
SetBkMode
GetObjectW
StartDocW
SetROP2
CreatePen

comdlg32

GetSaveFileNameW
ReplaceTextW
ChooseFontW

advapi32

RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 20KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 20KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 44KB - Virtual size: 43KB