d2f67e8b438a55e824a480d7f8455f870b15691ae920c66b339db2d65ffd2503

Sharing

Copy URL Twitter E-mail

General

Target

d2f67e8b438a55e824a480d7f8455f870b15691ae920c66b339db2d65ffd2503
Size

604KB
MD5

53d002c1d53114e7e9ddf04263027190
SHA1

97629a298a9ca0e452eb2f5e595ac07ba576daf1
SHA256

d2f67e8b438a55e824a480d7f8455f870b15691ae920c66b339db2d65ffd2503
SHA512

6c884a35166b7780d77a9073bad231421e61fe2add22eee4fd4759226279d09ef5ff6e0ad7c05fe47dcbf0f4b62eb28ac5434f3fb25eb83f1f5290663c7ce566
SSDEEP

6144:bbskF7FEIg6Va5+oCJwBFQNwrOHupasCF3TA:fTzapHBFCwrPasCpTA

Score

N/A

Malware Config

Signatures

Files

d2f67e8b438a55e824a480d7f8455f870b15691ae920c66b339db2d65ffd2503
.exe windows x86

24938c04eaa91360dad6a3089fc67d0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

stlang

LocalizeSetLangID
LocalizeGetLangID
LocalizeString

mfc42u

ord540
ord5871
ord2854
ord613
ord1634
ord1633
ord6871
ord289
ord1143
ord2114
ord4155
ord6354
ord1088
ord6193
ord283
ord4128
ord4292
ord5784
ord472
ord2559
ord3614
ord2855
ord823
ord535
ord5568
ord861
ord2910
ord2810
ord538
ord858
ord2606
ord4273
ord6655
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord617
ord815
ord296
ord561
ord641
ord2506
ord5297
ord5208
ord2613
ord1131
ord2717
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord4401
ord5276
ord4419
ord3592
ord324
ord2294
ord4229
ord2971
ord5210
ord4124
ord6195
ord1165
ord5949
ord3087
ord4704
ord6211
ord922
ord2858
ord3871
ord470
ord2634
ord6107
ord6330
ord5142
ord4688
ord5798
ord665
ord1971
ord5438
ord3313
ord5180
ord354
ord6919
ord4197
ord5436
ord6379
ord5446
ord6390
ord5674
ord537
ord3312
ord5785
ord5732
ord4272
ord6279
ord6278
ord2756
ord6867
ord2236
ord2372
ord3133
ord3792
ord3568
ord3688
ord6168
ord5783
ord4118
ord1921
ord3716
ord795
ord3711
ord790
ord3915
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4390
ord1768
ord4073
ord6051
ord2567
ord2406
ord3621
ord800
ord2859
ord5977
ord5047
ord2371
ord4279
ord2397
ord4270
ord5781
ord567
ord556
ord323
ord609
ord809
ord640
ord3569
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord755
ord1173
ord1240
ord6466
ord1571
ord600
ord826
ord269
ord3658
ord825
ord3566
ord3397
ord2806
ord1569

msvcrt

_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
iswspace
_wcsnicmp
_wtoi
wcstol
wcscmp
memmove
wcsstr
wcsncmp
wcschr
wcscpy
wcsncpy
_ftol
wcslen
__CxxFrameHandler

kernel32

GetStartupInfoW
GetModuleHandleW
LocalAlloc
LocalFree
LoadLibraryA
GetProcAddress
GetVersionExW
ExpandEnvironmentStringsW
MultiByteToWideChar
GetModuleFileNameW
GetCurrentThreadId

user32

GetWindowRect
OffsetRect
DrawStateW
FillRect
DrawFocusRect
ReleaseDC
GetDC
CreateIconIndirect
GetIconInfo
LoadImageW
InflateRect
GetClientRect
GetSysColor
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongW
SendMessageW
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
SetRect
GetActiveWindow
WindowFromPoint
ClientToScreen
PostMessageW
TrackPopupMenuEx
GetSubMenu
FrameRect
EnableWindow
ReleaseCapture
SetCapture
GetCapture
SetFocus
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
FindWindowW
LoadIconW
SetWindowRgn
SystemParametersInfoW
LoadBitmapW
SetWindowLongW
AppendMenuW
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
ScreenToClient
SetWindowPos
GetDlgItem
GetNextDlgGroupItem
GetFocus
DrawEdge
SetLayeredWindowAttributes
RedrawWindow
CopyRect

gdi32

DeleteDC
Rectangle
CreatePen
CreateSolidBrush
ExtCreatePen
RoundRect
Arc
GetTextColor
GetTextExtentPoint32W
CreateRectRgn
CombineRgn
CreateFontIndirectW
SetPixel
SetTextColor
CreateCompatibleBitmap
GetStockObject
GetPixel
GetDeviceCaps
CreateBitmap
SetBkColor
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
GetObjectW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteExW

comctl32

_TrackMouseEvent
ord17

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString

winmm

PlaySoundW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

gdiplus

GdipCreateFromHDC
GdipSetSmoothingMode
GdipCreateSolidFill
GdipDeleteBrush
GdipDeleteGraphics
GdipFillPath
GdipCloneBrush
GdipAlloc
GdipCreatePath
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCloneImage
GdipDisposeImage
GdipFree
GdipDeletePath

shlwapi

PathFindFileNameW
PathSkipRootW
PathParseIconLocationW
PathMakePrettyW
PathCanonicalizeW
PathFileExistsW
PathRemoveArgsW

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

24938c04eaa91360dad6a3089fc67d0a

Headers

File Characteristics

Imports

stlang

mfc42u

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

winmm

version

gdiplus

shlwapi

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 500KB - Virtual size: 500KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 500KB - Virtual size: 500KB