701a79ce9fe4d434548ef5359b28aa933472b3cff5b7e64cd05f69b0e48c5f41

Sharing

Copy URL Twitter E-mail

General

Target

701a79ce9fe4d434548ef5359b28aa933472b3cff5b7e64cd05f69b0e48c5f41
Size

524KB
MD5

019624ac62315e7a66d51a8a02cde9c0
SHA1

09745a568cb6bb6a4e7923dec07ed8ed3a4094e1
SHA256

701a79ce9fe4d434548ef5359b28aa933472b3cff5b7e64cd05f69b0e48c5f41
SHA512

9c1e245472357d3b8ae1c2063b510107be4633e9465b3914403330c5a3420c60dc4b2674732a166a8ba4d68e43d6071d2a0b40f676234a6eafdb5a91a48976e8
SSDEEP

12288:xqtzlSiQ6Enwcc7cfnGjQ7t+p4Mrj5U8fLeaCnH2:xUzlU6EnwcxuQ7UOEj1fLj7

Score

N/A

Malware Config

Signatures

Files

701a79ce9fe4d434548ef5359b28aa933472b3cff5b7e64cd05f69b0e48c5f41
.exe windows x86

d5dcdaf3744c9073c1ac0447fe945e1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowDC
BeginDeferWindowPos
GetMenuItemID
CopyAcceleratorTableW
GetUpdateRect
GetMenu
GetDCEx
GetTopWindow
IsWindow
BeginPaint
GetSysColorBrush
RegisterClipboardFormatW
UnhookWindowsHookEx
KillTimer
GetDesktopWindow
IsZoomed
SendDlgItemMessageW
GetWindowRgn
UnregisterClassW
GetCapture
MessageBeep
CharUpperW
GetMessageW
RemoveMenu
GetKeyboardLayout
GetScrollInfo
IsWindowEnabled
CallNextHookEx
MessageBoxW
FrameRect
SetActiveWindow
PtInRect
DrawStateW
GetKeyState
SetRectEmpty
GetForegroundWindow
DispatchMessageW
DestroyWindow
SetRect
PostMessageW
GetWindowThreadProcessId
RegisterClassExW
TrackPopupMenu
MapWindowPoints
AdjustWindowRectEx
GetScrollPos
DeleteMenu
SystemParametersInfoA
WaitMessage
SetParent
GetCursorPos
IntersectRect
LoadBitmapW
GetSysColor
GetMenuItemCount
ShowWindow
SetScrollPos
SetClipboardData
GetWindowRect
GetDC
UpdateWindow
ValidateRect
GetClassNameW
ScreenToClient
SetCapture
DrawEdge
CallWindowProcW
BringWindowToTop
InsertMenuItemW
GetMenuItemInfoW
MoveWindow
DefWindowProcW
GetWindowTextW
GetDlgItem
LoadCursorW
DrawTextW
GetClassLongW
OpenClipboard
PostQuitMessage
GetAsyncKeyState
InflateRect
ReleaseDC
TranslateAcceleratorW
CheckDlgButton
SetForegroundWindow
ReleaseCapture
SetDlgItemTextW
EnableWindow
GetWindowLongW
GetSystemMetrics
GetSubMenu
GetMenuStringW
SetPropW
SetMenu
GetFocus
GetActiveWindow
CreateWindowExW
InsertMenuW
ClientToScreen
CheckMenuItem
GetSystemMenu
RedrawWindow
CopyIcon
SetWindowTextW
DestroyAcceleratorTable
DestroyIcon
SetWindowPos
EndDeferWindowPos
wsprintfW
GetMessagePos
TranslateMDISysAccel
SetCursor
LockWindowUpdate
InvalidateRect
SetTimer
ModifyMenuW
PostThreadMessageW
LoadStringW
DrawIconEx
EnumWindows
GetDlgCtrlID
GetAncestor
GetClassInfoExW
EnumChildWindows
GetMenuState
LoadMenuW
GetLastActivePopup
WindowFromPoint
EnableMenuItem
MapDialogRect
SetScrollInfo
CreatePopupMenu
IsRectEmpty
CloseClipboard
SetFocus
DrawFocusRect
EndPaint
EmptyClipboard
EndDialog
GetParent
GetClientRect
LoadIconW
RegisterClassW
FindWindowW
GetPropW
IsWindowVisible
DeferWindowPos
FillRect
SystemParametersInfoW
GetNextDlgTabItem
SetWindowRgn
RemovePropW
GetIconInfo
MapVirtualKeyW
OffsetRect
GetDoubleClickTime
DefFrameProcW
IsChild
SetWindowLongW
IsMenu
TranslateMessage
IsDialogMessageW
LoadImageW
PeekMessageW
SetCursorPos
RegisterWindowMessageW
GetWindowTextLengthW
InvalidateRgn
SetWindowsHookExW
SendMessageW
DestroyMenu
IsIconic
LoadAcceleratorsW
SetMenuItemInfoW
GetClipboardData
DrawFrameControl
CopyRect
DestroyCursor
IsClipboardFormatAvailable
GetWindowPlacement
AppendMenuW
SetMenuDefaultItem

shlwapi

StrStrIW
PathAddBackslashW
PathCanonicalizeW
PathRemoveBackslashW

advapi32

RegFlushKey
CreateServiceA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA

kernel32

LeaveCriticalSection
TerminateProcess
GetTimeZoneInformation
GetProcessHeap
GetFileSize
HeapCreate
FreeEnvironmentStringsA
GetLocalTime
GetConsoleMode
SetLastError
UnmapViewOfFile
IsProcessorFeaturePresent
SetStdHandle
CompareStringW
GetTimeFormatA
GetStdHandle
FlushFileBuffers
GetACP
ReadFile
EnterCriticalSection
HeapFree
IsDebuggerPresent
GetCommandLineW
GetConsoleCP
GetStartupInfoA
GetCurrentThreadId
WideCharToMultiByte
CloseHandle
LoadLibraryA
HeapAlloc
IsValidCodePage
GetVersionExA
RaiseException
TlsAlloc
QueryPerformanceCounter
SetFilePointer
CreateFileA
LoadLibraryW
InitializeCriticalSection
GetModuleHandleW
DeleteCriticalSection
GetModuleFileNameA
GetStringTypeW
FormatMessageW
InterlockedDecrement
RtlUnwind
MulDiv
LCMapStringA
HeapSize
LocalFree
CreateMutexW
VirtualAlloc
SetHandleCount
GetConsoleOutputCP
TlsFree
GetTickCount
WriteFile
DeleteFileW
MultiByteToWideChar
InterlockedExchange
GetLastError
GetOEMCP
SetEnvironmentVariableA
GetCommandLineA
GetFileType
LockFile
GetEnvironmentStringsW
VirtualQuery
SetCurrentDirectoryA
TlsGetValue
SetEndOfFile
GetCPInfo
GetModuleHandleA
InterlockedIncrement
GetCurrentProcess
IsValidLocale
GetStringTypeA
HeapDestroy
ExitProcess
LCMapStringW
UnlockFile
HeapReAlloc
TlsSetValue
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetDateFormatA
GetModuleFileNameW
CompareStringA
GetProcAddress
GetEnvironmentStrings
SetUnhandledExceptionFilter
Sleep
FreeEnvironmentStringsW
VirtualFree
GetStartupInfoW
LoadResource
GetCurrentProcessId
lstrlenA
GlobalFree
WriteConsoleA
GetLocaleInfoA
WriteConsoleW

comctl32

ImageList_GetImageInfo
PropertySheetW
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
CreateStatusWindowW
ImageList_Draw
DestroyPropertySheetPage
ImageList_LoadImageW
ImageList_GetIcon
CreatePropertySheetPageW
_TrackMouseEvent
ord17
ImageList_GetImageCount
ImageList_AddMasked
InitCommonControlsEx

gdi32

GetBkMode
SetTextCharacterExtra
GetViewportExtEx
GetClipRgn
GetObjectA
CreateCompatibleBitmap
SetAbortProc
OffsetRgn
BitBlt
PtVisible
MoveToEx
GetMapMode
FillRgn
SetStretchBltMode
SetWindowOrgEx
LineTo
RealizePalette
Polyline
Polygon
SelectPalette
GetClipBox
CreatePen
GetNearestColor
CreateFontA
Rectangle
SetWindowExtEx
SelectObject
CreatePatternBrush

version

VerQueryValueA
GetFileVersionInfoA

shell32

SHGetFileInfoA
ord155
SHGetSpecialFolderLocation
DragQueryFileA
ShellExecuteA
Shell_NotifyIconA

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5dcdaf3744c9073c1ac0447fe945e1f

Headers

File Characteristics

Imports

user32

shlwapi

advapi32

kernel32

comctl32

gdi32

version

shell32

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 264KB - Virtual size: 260KB

.data Size: 84KB - Virtual size: 98KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 264KB - Virtual size: 260KB

.data
Size: 84KB - Virtual size: 98KB

.rsrc
Size: 48KB - Virtual size: 45KB