e4689d568044f3a085ebdb1d724ac8cca3ecf7ae79a65691aa3b49cf7e35b085

Sharing

Copy URL Twitter E-mail

General

Target

e4689d568044f3a085ebdb1d724ac8cca3ecf7ae79a65691aa3b49cf7e35b085
Size

336KB
MD5

7228dc371d96cafd25d6864095cef3ed
SHA1

1c3a780c3eb3cf87322c242f94aa68e62eb321a8
SHA256

e4689d568044f3a085ebdb1d724ac8cca3ecf7ae79a65691aa3b49cf7e35b085
SHA512

58bc9e33bdfb83e3f88a79931d1903368bb7e8cee22701e319ff45a9c3ded07cac8838b476247952b9326974b30eba0d650e2c05fe46f20b076513a668a8ebff
SSDEEP

3072:bf5gErOipfceniGLM9z+u9huV8rkFsn/milrqqsACCxljed/8ia7jFvnWZX:KPipfgKahuqwU/mRqsIRe5s

Score

N/A

Malware Config

Signatures

Files

e4689d568044f3a085ebdb1d724ac8cca3ecf7ae79a65691aa3b49cf7e35b085
.exe windows x86

b33798484b8e5d89c1165afe1d684c50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

TlsAlloc
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
TlsSetValue
SetThreadPriority
CreateSemaphoreA
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
OutputDebugStringA
WriteConsoleA
WriteFile
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
AllocConsole
GetStdHandle
TlsGetValue
ResumeThread
GetPrivateProfileStringA
Sleep
GetLastError
GetEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
UnhandledExceptionFilter
GetCurrentDirectoryA
HeapSize
GetDriveTypeA
SetHandleCount
IsBadWritePtr
FlushFileBuffers
VirtualAlloc
VirtualFree
HeapReAlloc
HeapDestroy
GetEnvironmentVariableA
HeapCreate
SetLastError
SetUnhandledExceptionFilter
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
GetVersion
TerminateProcess
ExitProcess
GetModuleHandleA
GetFileAttributesA
HeapAlloc
GetFullPathNameA
SetStdHandle
HeapFree
GetFileType
RtlUnwind
QueryPerformanceCounter
RaiseException
IsBadReadPtr
IsBadCodePtr
QueryPerformanceFrequency
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetOEMCP
LoadLibraryA
GetACP
GetStringTypeA
GetStringTypeW
GetSystemTimeAsFileTime
ReadFile
GetTimeZoneInformation
GlobalUnlock
LocalFree
GetVersionExA
FormatMessageA
Beep
SetEnvironmentVariableA
GlobalLock
GlobalAlloc
WritePrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
CompareStringW

user32

ReleaseDC
GetDlgItemTextA
ShowWindow
SetWindowPos
DialogBoxParamA
SetClipboardViewer
DrawMenuBar
AppendMenuA
GetSystemMenu
GetWindowLongA
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
InvalidateRect
GetDC
MessageBoxA
SetWindowTextA
SetForegroundWindow
AdjustWindowRectEx
SetRect
SystemParametersInfoA
SetDlgItemTextA
GetMessageA
LoadKeyboardLayoutA
EnableWindow
DispatchMessageA
IsDlgButtonChecked
GetDlgItem
GetDlgItemInt
SetDlgItemInt
GetKeyState
GetKeyboardState
ToAscii
CloseDesktop
OpenDesktopA
EnumDesktopWindows
DestroyMenu
FindWindowA
GetClassNameA
SetMenuDefaultItem
GetSubMenu
GetMenuItemID
RegisterClassExA
TrackPopupMenu
LoadStringA
SetCursorPos
LoadMenuA
GetCursorPos
EmptyClipboard
GetSystemMetrics
CheckMenuItem
OpenClipboard
SetClipboardData
GetClipboardOwner
IsIconic
GetClipboardData
CloseClipboard
PostMessageA
GetKeyboardLayoutNameA
SetTimer
GetForegroundWindow
BeginPaint
EndPaint
KillTimer
GetWindow
ChangeClipboardChain
GetWindowRect
GetFocus
SetCursor
DefWindowProcA
ShowScrollBar
PostQuitMessage
ScrollWindowEx
SendMessageA
GetClientRect
DestroyWindow
SetScrollInfo
UpdateWindow
SetWindowLongA
EndDialog
DrawTextA

gdi32

CreateCompatibleDC
SelectPalette
CreatePalette
GetDeviceCaps
GetStockObject
SetTextColor
ExtTextOutA
SetBkColor
RealizePalette
SelectObject
CreateCompatibleBitmap
DeleteObject
DeleteDC
UpdateColors
BitBlt
StretchBlt
SetBrushOrgEx
SetStretchBltMode
SetPixelV
CreateFontIndirectA
GdiFlush
SetBkMode
Rectangle
GetClipBox

comdlg32

CommDlgExtendedError
GetSaveFileNameA

advapi32

RegEnumValueA
RegOpenKeyA
RegSetValueA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCreateKeyA
RegQueryValueExA

shell32

Shell_NotifyIconA

wsock32

accept
WSACleanup
WSAStartup
inet_ntoa
bind
listen
WSAAsyncSelect
recv
shutdown
send
setsockopt
ioctlsocket
gethostbyname
htons
connect
getpeername
closesocket
socket
WSAGetLastError
select

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jwefkk
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 92KB - Virtual size: 88KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b33798484b8e5d89c1165afe1d684c50

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

wsock32

Sections

.text Size: 136KB - Virtual size: 133KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 28KB - Virtual size: 33KB

.rsrc Size: 52KB - Virtual size: 52KB

jwefkk Size: 8KB - Virtual size: 4KB

Size: 92KB - Virtual size: 88KB

.text
Size: 136KB - Virtual size: 133KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 28KB - Virtual size: 33KB

.rsrc
Size: 52KB - Virtual size: 52KB

jwefkk
Size: 8KB - Virtual size: 4KB