7cfab5299b7f6362151a7eab77102d7abc2f6c9d85773004103f546b93af9a78

Sharing

Copy URL

Twitter E-mail

General

Target

7cfab5299b7f6362151a7eab77102d7abc2f6c9d85773004103f546b93af9a78
Size

181KB
MD5

635225e40d1ab681b657b5e21dd23f32
SHA1

6c2ea698bdfb75d8c976a204d9dbafd7487eee93
SHA256

7cfab5299b7f6362151a7eab77102d7abc2f6c9d85773004103f546b93af9a78
SHA512

fc77ed1546df1ddf4e13d892f54d7f0acf7dca15ee62a9e25ab1694f53eaaab3e954780b060c61c960b066db0a46f5ba77c83f941ff2b9ccf929258a162d1dd8
SSDEEP

3072:Q9lHbd/xC9lcdk7VrveYRsYNqDrZCG5GUrKBq4YsPmSq5sCsP6kEt9ofCESsRRcE:Qfbd/xC9r73WogrZ95GUrAq4LatYVBSY

Score

N/A

Malware Config

Signatures

Files

7cfab5299b7f6362151a7eab77102d7abc2f6c9d85773004103f546b93af9a78
.exe windows x86

2e5203034c5a29f1de8090737ec43d11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExW
LookupAccountSidW
CryptDestroyKey
RegCloseKey
NotifyBootConfigStatus
CryptDecrypt
RegCreateKeyExA
LookupAccountNameW
OpenEventLogA
CryptReleaseContext
OpenEventLogW

psapi

QueryWorkingSet

comdlg32

ChooseColorW
GetFileTitleW
CommDlgExtendedError
GetSaveFileNameA
PrintDlgExW

gdi32

SetWindowOrgEx
SetAbortProc
GetNearestColor
CreateFontW
SetViewportOrgEx
StartDocW
CreateHalftonePalette
SetTextColor
ExtFloodFill
GetBkMode
GetDeviceCaps
SetTextAlign
SetDIBits
SelectPalette
CreateFontIndirectA
OffsetRgn
GetStockObject
GetTextExtentPoint32A
GetNearestPaletteIndex
EnumFontsW
Ellipse
ExcludeClipRect
LineTo
RestoreDC
GetTextExtentPoint32W
GetTextExtentPointW
StartPage
CreateBitmap
EndPage
GetObjectW
GetDIBColorTable
FillRgn
GetObjectA
GetViewportOrgEx
BeginPath
SetPixel
GetFontData

kernel32

IsDBCSLeadByte
LoadLibraryExW
TlsSetValue
GetFileType
GetNumberFormatA
SetFileAttributesA
FindFirstFileW
FindResourceW
lstrcatW
GlobalLock
GetTickCount
SetThreadAffinityMask
LoadLibraryExA
GetCompressedFileSizeW
GetFileAttributesExA
GetBinaryTypeA
LockResource
GetStartupInfoW
GetFileAttributesW
MoveFileExA
MulDiv
FormatMessageA
TerminateThread
GlobalCompact
GetCommandLineA
WaitForSingleObjectEx
CreateRemoteThread
SearchPathA
GetFileInformationByHandle
lstrcpynA
UnmapViewOfFile
ReleaseSemaphore
GetTempFileNameW
GetSystemDirectoryA
WaitForMultipleObjectsEx
GetThreadPriority
GetShortPathNameA
IsValidLanguageGroup
GetCurrentThread
GetLocaleInfoW
VirtualFree
SetThreadExecutionState
FindResourceExA
lstrlenA
IsDBCSLeadByteEx
GetVersionExA
LoadLibraryA
SleepEx
GetTempPathA
GetComputerNameW
SetUnhandledExceptionFilter
SetFilePointer
lstrlenW
lstrcmpiW
QueryPerformanceCounter
OpenSemaphoreW
GetTimeZoneInformation
GlobalReAlloc
GetSystemTimeAsFileTime
GetCommState
CopyFileA
GlobalAlloc
GetModuleFileNameW
FindClose
GlobalSize
GetCurrentThreadId
GetModuleHandleW
GetCommProperties
GetComputerNameA
GetThreadLocale
IsBadWritePtr
GetComputerNameExA
HeapValidate
FileTimeToLocalFileTime
HeapSize
GetStringTypeExW
RaiseException
SetHandleCount
GetExitCodeThread
GetDateFormatA
HeapWalk
SetFileAttributesW
GetNumberFormatW
GetSystemDefaultUILanguage

shlwapi

PathIsFileSpecW

user32

GetMessageW
KillTimer
LockWindowUpdate
DefDlgProcA
ExitWindowsEx
OpenInputDesktop
DialogBoxIndirectParamW
WaitMessage
InflateRect
GetWindowPlacement
DrawStateW
MessageBoxExW
CharUpperA
RemovePropW
ToUnicodeEx
SetScrollInfo
ValidateRect
DestroyCursor
CreateWindowExW
IsDialogMessageA
GetMenuItemRect
PeekMessageW
RegisterClassExA
CopyRect
GetSubMenu
DrawTextA
OpenDesktopW
TrackPopupMenu
SendMessageA
CheckMenuItem
SendInput
GetFocus
FindWindowExW
SetMenuItemBitmaps
GetScrollPos
SwitchToThisWindow
LoadStringW
wvsprintfA
DefWindowProcW
SetLastErrorEx
AdjustWindowRectEx
CheckMenuRadioItem
GetNextDlgGroupItem
GetWindowLongA
GetMonitorInfoW
LoadBitmapA
LoadImageA
AllowSetForegroundWindow
LookupIconIdFromDirectory
GetDCEx
GrayStringW
LoadCursorA
EnumThreadWindows
OffsetRect
SetMenu
SetRectEmpty
CheckRadioButton
CharUpperBuffW
IsMenu
DrawFocusRect
ScrollWindowEx
VkKeyScanW
GetWindowTextLengthW
CreateWindowExA
wsprintfW
InSendMessageEx
AdjustWindowRect
GetWindowTextW
DrawTextExW
DefFrameProcA
GetMenuItemInfoW
SetWindowLongA
MoveWindow
SetPropW
IsCharAlphaNumericW
IsZoomed
SetCursorPos
LoadStringA
MonitorFromRect
DrawMenuBar
DrawFrameControl
GetActiveWindow
TabbedTextOutW
GetDoubleClickTime
CreateIconIndirect
CharPrevA
GetClassInfoExA
IsWindowUnicode
FrameRect
MessageBoxW

comctl32

PropertySheetW
InitCommonControlsEx
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create

msvcrt

strlen

Exports

Exports

GetWidthA
FindMessageW
IncrementWindowEx
CrtStateW
CrtArgumentNew
CancelCharExA
KillMediaTypeA
RemoveThreadEx

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Re82
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tup
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e5203034c5a29f1de8090737ec43d11

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

psapi

comdlg32

gdi32

kernel32

shlwapi

user32

comctl32

msvcrt

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.Re82 Size: 7KB - Virtual size: 7KB

.Lax503 Size: 1024B - Virtual size: 626B

.Tup Size: 22KB - Virtual size: 22KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 120B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 140KB - Virtual size: 140KB

.Re82
Size: 7KB - Virtual size: 7KB

.Lax503
Size: 1024B - Virtual size: 626B

.Tup
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 120B

.reloc
Size: 6KB - Virtual size: 5KB