995f970e5fda6912e6c549a680b8ae0d4e4e65df28bf4590cbcd9b433c5ad677

Sharing

Copy URL Twitter E-mail

General

Target

995f970e5fda6912e6c549a680b8ae0d4e4e65df28bf4590cbcd9b433c5ad677
Size

229KB
MD5

7085ada0d2082d15e63b40970c3fbf90
SHA1

36ee24bb4b2c1e5bf23a44c90b987effbc43b397
SHA256

995f970e5fda6912e6c549a680b8ae0d4e4e65df28bf4590cbcd9b433c5ad677
SHA512

1e1d81974fc27addaa5c3de5b9b842a1e9d8f3abca3f51485b9cbf144991cc1475047894b607f00ae164f826f77ab34129bc54c90d8416d1ac1c02ebc7db2141
SSDEEP

3072:SCtNd5jMd4u2ijPOuo+7vfEKcoLvfX6vdCsQKFQfre/OyjXy:SCtRjMdh2p+7vfEKccqvd/LFOeGyTy

Score

N/A

Malware Config

Signatures

Files

995f970e5fda6912e6c549a680b8ae0d4e4e65df28bf4590cbcd9b433c5ad677
.exe windows x86

6f7ba750996d53a4414727ea7f920896

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleBitmap
CreatePen
Polyline
CreateRectRgn
GetTextMetricsA
CreateFontIndirectA
StartDocA
CreateSolidBrush
SetROP2
GetBkColor
EndDoc
CreateRectRgnIndirect
GetObjectA
SetTextAlign
RectInRegion
CreateDIBSection
GetDeviceCaps
Rectangle
GetStockObject
RestoreDC
SetMapMode
SetBkMode
GetBkMode
SaveDC
EndPage
CreateCompatibleDC
MoveToEx
SetTextColor
SetBkColor
ExtTextOutA
SelectObject
GetTextExtentPoint32A
LineTo
DeleteObject
BitBlt
StartPage

user32

SetWindowTextA
UpdateWindow
RegisterClassExA
DeferWindowPos
MapWindowPoints
GetSubMenu
TranslateAcceleratorA
GetClassNameA
ScreenToClient
CreateIconIndirect
InflateRect
OpenClipboard
SetWindowPlacement
GetDlgCtrlID
GetSysColor
CreateDialogParamA
LoadMenuA
GetDoubleClickTime
FillRect
TrackPopupMenuEx
GetScrollInfo
RegisterWindowMessageA
RedrawWindow
DrawIconEx
ChildWindowFromPoint
RegisterClassA
InvalidateRgn
DeleteMenu
GetWindowPlacement
LoadAcceleratorsA
KillTimer
LoadIconA
GetFocus
DrawMenuBar
FindWindowExA
LoadCursorA
ShowWindow
GetParent
SetDlgItemTextA
AppendMenuA
CreateWindowExA
SetClipboardData
SetWindowLongA
DialogBoxParamA
GetWindowLongA
IsWindowVisible
IsDialogMessageA
GetSystemMetrics
EnableWindow
CopyRect
PtInRect
SetFocus
SetUserObjectSecurity
DrawTextA
EnableMenuItem
GetKeyState
SystemParametersInfoA
GetPropA
TrackPopupMenu
GetDlgItem
CallWindowProcA
DefDlgProcA
BeginPaint
MsgWaitForMultipleObjects
IsDlgButtonChecked
ScrollWindowEx
GetClassLongA
CheckMenuItem
BeginDeferWindowPos
DefWindowProcA
wsprintfA
GetClientRect
ModifyMenuA
SetClassLongA
LoadImageA
ExitWindowsEx
EndDialog
CloseClipboard

kernel32

GetFileType
TlsAlloc
UnhandledExceptionFilter
TlsFree
SetEndOfFile
Module32Next
InterlockedExchange
VirtualFree
ExpandEnvironmentStringsA
WriteConsoleA
WideCharToMultiByte
LCMapStringA
ReadFile
HeapAlloc
CreateFileA
TlsGetValue
GlobalAddAtomA
GetProcessAffinityMask
GlobalAlloc
ExitProcess
lstrcatA
GetStringTypeA
InterlockedDecrement
GetCurrentProcess
GetStartupInfoA
FreeEnvironmentStringsW
GetModuleHandleW
GetDateFormatA
VirtualAlloc
SizeofResource
FormatMessageA
GlobalMemoryStatus
GetSystemDirectoryA
GetModuleFileNameA
SetProcessWorkingSetSize
UnmapViewOfFile
GetDriveTypeA
GetCommandLineA
HeapCreate
GlobalUnlock
GetModuleHandleA
GetProcessHeap
WaitForSingleObject
SetPriorityClass
GetCPInfo
SetFilePointer
DeleteCriticalSection
TlsSetValue
LeaveCriticalSection
IsDebuggerPresent
MapViewOfFile
GetCommandLineW
SetLastError
TerminateThread
LCMapStringW
SetThreadAffinityMask
SearchPathA
GetFileAttributesA
FindClose
GetThreadContext
lstrcpyA
FreeEnvironmentStringsA
GetCurrentProcessId
ExitThread
CreateFileMappingA
CreateProcessA
IsBadReadPtr
GetExitCodeThread
PulseEvent
SetErrorMode
WriteFile
CreateThread
GetLocaleInfoA
EnterCriticalSection

msvcrt

strcspn
_XcptFilter
_scwprintf
__getmainargs
mktime
_swab
_heapadd
fputwc
gets
__p__commode
_wtol
_adj_fdivr_m64
fwrite
_wtof
_mbctoupper
_tempnam
_vscwprintf
_initterm
_aligned_realloc
_ismbchira
_mbsncmp
_unloaddll
_nextafter
_commit
_snwscanf
__set_app_type
_dup2
rand
_mbsncpy
_mbsupr
_cputs
_getws
_fmode
_tzset
vfwprintf
_pctype
_ismbcsymbol
_cexit
log
free
_mbsnset
_getdrives
_wexecvp
atan2
system
wcsrchr
_aligned_free
_findnexti64
__p__fmode
_strnset
_sleep
memcpy
_vsnwprintf
_wcstoi64
_memicmp
_winminor
_exit
_ismbcprint
memchr
_wrename
_wtoi64
_mbspbrk
fputc
_safe_fprem1
_adjust_fdiv
sinh
_except_handler3
wcscat
_wutime64
atof
_heapchk
_ismbbkalnum
_lsearch
_outp
_getcwd
ldiv
ispunct
_wtempnam
iswalpha
_ismbcgraph
_dstbias
abs
_i64toa
puts
_execlp
_ui64tow
_adj_fdiv_m16i
_acmdln
_set_sbh_threshold
_mbsspnp
_heapwalk
_stati64
_mbsicoll
wctomb
_gcvt
_controlfp
_mbsicmp
_getsystime
calloc
exit
__setusermatherr
fputws
fsetpos
_wfindnext
strlen
_logb
qsort
_fullpath
_hypot
strftime
_adj_fprem1
_mbcasemap
_daylight

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f7ba750996d53a4414727ea7f920896

Headers

File Characteristics

Imports

gdi32

user32

kernel32

msvcrt

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 200KB - Virtual size: 200KB

.data Size: 512B - Virtual size: 112B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 200KB - Virtual size: 200KB

.data
Size: 512B - Virtual size: 112B

.rsrc
Size: 512B - Virtual size: 4B