95af45fd9ebbb79f6467aec948adb1cf609100a33fd44562ed44519d2211225c

Sharing

Copy URL Twitter E-mail

General

Target

95af45fd9ebbb79f6467aec948adb1cf609100a33fd44562ed44519d2211225c
Size

506KB
MD5

6c343d1241e994c877025085aa4b6e10
SHA1

f051a26b50323ae6b17ccae5e6db9f2ac0a1ae8c
SHA256

95af45fd9ebbb79f6467aec948adb1cf609100a33fd44562ed44519d2211225c
SHA512

f9749d7e8ff7fcd178f573dd8c6cc49a043a75171b16d6e6fbcf7429a276b08345a48ce3bbc39cde49ada51720ca0bd64bcd393f97f350260f4cbfbe749a61e5
SSDEEP

6144:LJF2qr8IDDA/j6Isnd+ZhzlOdKjrK6y7VkZSerLcQcILAZAOOjC2ld8jiW81hbWg:6qr8EchB8Kje6yOZSerxLAZwm0kU0Tr

Score

N/A

Malware Config

Signatures

Files

95af45fd9ebbb79f6467aec948adb1cf609100a33fd44562ed44519d2211225c
.exe windows x86

e0a4ae08f679efbe6a17b719ce8dd4c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

TransparentBlt

comctl32

ord17
_TrackMouseEvent

hccutils

LoadBITMAP
FindResources
LoadICON
StretchBitmap
LoadCURSOR
LoadSTRING

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

kernel32

SearchPathA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
HeapAlloc
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
lstrcmpiA
SetEvent
InterlockedIncrement
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateMutexA
GetCommandLineA
GetSystemInfo
GetSystemDefaultLCID
GetWindowsDirectoryA
LocalAlloc
LocalFree
MulDiv
GetLastError
ReadFile
GetFileSize
SetFilePointer
DeleteFileA
GetTempFileNameA
GetTempPathA
WriteFile
GetDateFormatA
GetTimeFormatA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetStartupInfoA
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
VirtualProtect
HeapReAlloc
RtlUnwind
CloseHandle
lstrcpynA
CreateProcessA
GetModuleHandleA
GetProcessHeap
HeapFree
Sleep
InterlockedDecrement
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
CreateFileA

user32

SetDlgItemTextA
GetDlgItemTextA
RegisterHotKey
UnregisterHotKey
MapVirtualKeyA
GetIconInfo
ScreenToClient
GetWindowDC
FillRect
FrameRect
RedrawWindow
RegisterWindowMessageA
EnumWindows
SetTimer
KillTimer
GetFocus
IsWindowVisible
PostQuitMessage
MapWindowPoints
GetClassNameA
MoveWindow
SetFocus
GetWindowRect
SetWindowPos
EndDialog
IsWindow
MessageBoxA
SetWindowRgn
DrawFocusRect
PeekMessageA
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageA
TrackPopupMenu
DestroyMenu
CreatePopupMenu
AppendMenuA
FindWindowA
PostMessageA
GetActiveWindow
DrawFrameControl
RegisterClassA
DrawEdge
GetSystemMetrics
UnregisterClassA
EnumDisplaySettingsA
SendMessageA
GetDlgItem
EnableWindow
SetWindowTextA
GetWindowTextA
ShowWindow
GetKeyNameTextA
CharNextA
RegisterClassExA
CreateWindowExA
ReleaseCapture
SetCursor
DrawTextA
UnionRect
IntersectRect
PtInRect
LoadCursorA
InflateRect
GetSysColorBrush
GetClassInfoExA
GetParent
SetCapture
InvalidateRect
ReleaseDC
GetDC
DestroyWindow
GetDlgCtrlID
GetCursorPos
wsprintfA
CallWindowProcA
DefWindowProcA
SetWindowLongA
GetClientRect
BeginPaint
EndPaint
CreateDialogParamA
DialogBoxParamA
IsWindowEnabled
GetWindowLongA

gdi32

IntersectClipRect
GetDeviceCaps
SetTextAlign
CreatePatternBrush
TextOutA
GetPixel
CreateCompatibleDC
GetObjectA
SelectObject
SetStretchBltMode
StretchBlt
ExcludeClipRect
SelectClipRgn
DeleteDC
SetBrushOrgEx
DeleteObject
CreateCompatibleBitmap
SetPixel
BitBlt
Polyline
GetTextExtentPoint32A
CreateSolidBrush
CreatePen
Rectangle
SetTextColor
SetBkMode
SetROP2
GetStockObject
CreateFontIndirectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA

shell32

ShellExecuteExA

ole32

StringFromGUID2
CoInitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoTaskMemAlloc
CLSIDFromProgID

oleaut32

SysAllocString
SysAllocStringByteLen
SysStringByteLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VarBstrCat

shlwapi

PathFindExtensionA

Sections

.text
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e0a4ae08f679efbe6a17b719ce8dd4c3

Headers

File Characteristics

Imports

msimg32

comctl32

hccutils

version

setupapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 372KB - Virtual size: 370KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 16KB - Virtual size: 68KB

.rsrc Size: 4KB - Virtual size: 3KB

.grdata Size: 60KB - Virtual size: 60KB

.text
Size: 372KB - Virtual size: 370KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 16KB - Virtual size: 68KB

.rsrc
Size: 4KB - Virtual size: 3KB

.grdata
Size: 60KB - Virtual size: 60KB