718ff16a41adbe32b8dab0c9d60e848d1483615625c7b02e2612cd22120ebcf7

Sharing

Copy URL Twitter E-mail

General

Target

718ff16a41adbe32b8dab0c9d60e848d1483615625c7b02e2612cd22120ebcf7
Size

121KB
MD5

6d47738dcbe079ef0fca2f10d9b7c4f1
SHA1

3808d0ecc205e48f264726011d6b10690206ae05
SHA256

718ff16a41adbe32b8dab0c9d60e848d1483615625c7b02e2612cd22120ebcf7
SHA512

903248f8073ca963edf040c1cd58c9e950f36d1b7ef1336956010526319e4858b12146636e3168b86e7c1606f12154ce2f5d2caa4cc5913b5f88578c774f03ba
SSDEEP

3072:2SWmDTEeIhSbYWcBvcKYe1CftmGcuEpIzb2COI:4mDgbSbrcBceum5mb

Score

N/A

Malware Config

Signatures

Files

718ff16a41adbe32b8dab0c9d60e848d1483615625c7b02e2612cd22120ebcf7
.exe windows x86

0aecdbce0464eba1afa207f4bbd2e69d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetCurrentProcessId
HeapAlloc
SetLastError
InterlockedCompareExchange
HeapFree
GetModuleFileNameW
CreateThread
SizeofResource
QueryPerformanceCounter
DeleteCriticalSection
SetEvent
GetStartupInfoW
LeaveCriticalSection
InitializeCriticalSection
WideCharToMultiByte
WaitNamedPipeW
IsProcessorFeaturePresent
InterlockedIncrement
VirtualFree
OutputDebugStringW
FlushInstructionCache
RaiseException
ReleaseMutex
WaitForMultipleObjects
GetVersionExW
VirtualAlloc
CloseHandle
TerminateProcess
FindResourceW
IsDebuggerPresent
LocalFree
FreeLibrary
InterlockedDecrement
LoadLibraryExW
GetProcAddress
lstrcmpiW
lstrlenW
TerminateThread
Sleep
LoadLibraryA
InterlockedExchange
EnterCriticalSection
FormatMessageW
WaitForSingleObject
CreateMutexW
CreateEventW
GetSystemTimeAsFileTime
MultiByteToWideChar
LoadLibraryW
GetCurrentThreadId
ExitProcess
GetModuleHandleW
LoadResource
SetUnhandledExceptionFilter
GetLastError
ResetEvent
CheckRemoteDebuggerPresent
GetVersion
VirtualProtect
BuildCommDCBA
GetPriorityClass
GetTickCount
GetCurrentProcess
lstrlenA
UnhandledExceptionFilter

user32

DispatchMessageW
DrawTextW
SetWindowLongW
GetMenuItemCount
LoadCursorW
GetWindowLongW
TranslateMessage
RegisterWindowMessageW
PostQuitMessage
SetTimer
GetSysColorBrush
GetMenuItemInfoW
GetMessageW
CallWindowProcW
DefWindowProcW
SetForegroundWindow
TrackPopupMenu
SetMenuDefaultItem
FillRect
CreatePopupMenu
LoadImageW
CharNextW
GetClassInfoExW
SystemParametersInfoW
DestroyMenu
DestroyWindow
IsMenu
ReleaseDC
FindWindowW
CreateWindowExW
UnregisterClassA
SetMenuItemInfoW
GetSysColor
GetSubMenu
GetCursorPos
DrawIconEx
GetDC
DeleteMenu
AppendMenuW
PostMessageW
DestroyIcon
GetSystemMetrics
GetDoubleClickTime
RegisterClassExW
LoadMenuW
LoadStringW
IsWindow
KillTimer

gdi32

DeleteObject
CreateFontIndirectW
SelectObject
SetBkColor
SetTextColor

advapi32

RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
GetUserNameA
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegNotifyChangeKeyValue
RegEnumValueW
RegSetValueExW

shell32

Shell_NotifyIconW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc

oleaut32

VarUI4FromStr

avifil32

EditStreamCut

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0aecdbce0464eba1afa207f4bbd2e69d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

avifil32

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 37KB - Virtual size: 99KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 37KB - Virtual size: 99KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1KB - Virtual size: 1KB