706fa0f117874c0d13a8737b6216919b1e1331cb59928a6a5d8bc16d5f3a7b86

Sharing

Copy URL Twitter E-mail

General

Target

706fa0f117874c0d13a8737b6216919b1e1331cb59928a6a5d8bc16d5f3a7b86
Size

177KB
MD5

6ee3702fb26bb8855cfbb1525bbd3e2c
SHA1

a447b5ef9198b3c5370e2f9e98e58fc5cb07a8ec
SHA256

706fa0f117874c0d13a8737b6216919b1e1331cb59928a6a5d8bc16d5f3a7b86
SHA512

ba170680098c203c4623c49f2aa14f1122a4cd62d77c03f9d3779312612b755cc4af80612b5aacc5c6e552f0e9d6000d733064225dc7d4d7c5fa98b4caed5c9f
SSDEEP

3072:to83qPFi8FnjLkzXddzTAUBE2jAF8wIlFkVU4foI8ocrgVHZV8LxVDludpNWw5EU:FqPQ7//G8wIlFkVU6tcrgp787ludqw

Score

N/A

Malware Config

Signatures

Files

706fa0f117874c0d13a8737b6216919b1e1331cb59928a6a5d8bc16d5f3a7b86
.exe windows x86

3f1387ba4968b7886aeae7c2e73ab89b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleInformation
QueryWorkingSet

rtutils

TracePrintfW

user32

LoadMenuA
AppendMenuW
ScrollWindowEx
KillTimer
GetClassNameW
GetKeyState
GetTopWindow
wvsprintfW
MonitorFromPoint
RegisterClassExA
TabbedTextOutW
RegisterClassW
DestroyCursor
CharUpperW
SetWindowTextA
ClientToScreen
CopyAcceleratorTableW
SetRect
CopyImage
CascadeWindows
GetWindowLongW
EnableWindow
SetWindowLongA
TranslateAcceleratorW
SetTimer
DefWindowProcW
LoadAcceleratorsA
GetScrollPos
GetSysColorBrush
SetScrollPos
GetDoubleClickTime
GetKeyboardLayoutNameW
IsCharAlphaW
ChildWindowFromPointEx
wsprintfW
InSendMessage
CharUpperBuffW
ClipCursor
CheckMenuItem
TrackPopupMenuEx
IsChild
SetMenuItemInfoW
LoadCursorA
PostMessageW
SetRectEmpty
GetWindowDC
DialogBoxParamA
TrackPopupMenu
WaitForInputIdle
GetScrollRange
DrawTextW
LoadMenuW
FindWindowA
GetMessageW
DefFrameProcA
InvertRect
SetWindowRgn
AppendMenuA
CharUpperA
GetDlgItemTextA
GetWindowTextLengthW
BringWindowToTop
GrayStringW
AllowSetForegroundWindow
GetWindow
DrawStateW
PostThreadMessageW
GetDlgItem
InternalGetWindowText
DestroyCaret
DispatchMessageW
RegisterClassExW
GetUserObjectInformationW
SendMessageTimeoutA
GetClassLongW
GetShellWindow
BeginPaint
SendDlgItemMessageW
CharToOemA
CharToOemBuffA
DrawAnimatedRects
GetKeyNameTextW
SetLastErrorEx
MessageBoxA
GetDlgItemTextW
LoadBitmapA
DrawStateA
EnumChildWindows
GetMenuItemID
MessageBoxW
IsMenu
SystemParametersInfoW
DrawIcon
GetForegroundWindow
HiliteMenuItem
GetMenuStringA
SystemParametersInfoA
MapVirtualKeyW
CharUpperBuffA
AdjustWindowRectEx
SendMessageTimeoutW
DeferWindowPos
GetParent
CharNextW

kernel32

IsBadStringPtrW
DeleteAtom
GetStartupInfoA
GlobalCompact
GetFileAttributesExW
lstrcpyW
SetCommBreak
GetSystemDirectoryW
GetThreadContext
CreateWaitableTimerW
FindFirstFileW
MultiByteToWideChar
CreateFileA
GetVersionExW
GetShortPathNameA
WaitForSingleObject
OpenEventA
GetSystemTime
GetFullPathNameW
LocalLock
FreeLibrary
TransactNamedPipe
CallNamedPipeW
GetLocaleInfoA
EnumResourceNamesA
DeleteCriticalSection
SearchPathW
MapViewOfFile
SetThreadContext
CreateSemaphoreA
GetTempPathW
SetTimerQueueTimer
MoveFileExA
GetFileSize
GetCurrentThread
FindResourceExA
SetSystemTimeAdjustment
WriteFile
LCMapStringW
SystemTimeToFileTime
EnumSystemLocalesA
GetVersion
LoadLibraryExW
PulseEvent
GetComputerNameExA
FindNextChangeNotification
lstrcmpiW
DeleteFileA
SetHandleCount
GetTempFileNameA
GetTickCount
HeapLock
LoadLibraryW
HeapAlloc
LoadLibraryA
CreatePipe
GetModuleHandleW
lstrcpynW
lstrcatW
WaitForSingleObjectEx
FormatMessageA
IsValidLocale
SetCommState
GetThreadLocale
WideCharToMultiByte
ReleaseMutex
lstrcmpA
GlobalReAlloc
GetUserDefaultUILanguage
HeapReAlloc
GetCurrentDirectoryW
GetVersionExA
CreateMutexW
SetCommMask
lstrcmpiA
LocalAlloc
TlsGetValue
CompareStringA
FindFirstChangeNotificationW
SetCurrentDirectoryW
GetFullPathNameA
lstrlenA
GetSystemTimeAsFileTime
GetTimeFormatA
RemoveDirectoryW
FindResourceW
GetSystemDefaultLangID
GlobalUnlock
GetStartupInfoW
FreeResource
SetCurrentDirectoryA
ReadFile
IsBadCodePtr
GetComputerNameA
DeviceIoControl
GetWindowsDirectoryW
LCMapStringA
GetAtomNameA
GlobalMemoryStatus
InitializeCriticalSection
SetFileTime
GetWindowsDirectoryA
GetSystemTimeAdjustment
GetCPInfo
GetNumberFormatA

Exports

Exports

RemoveArgumentNew
RemoveFolderPath
CallFolderA
HideKeyboard
CancelStringExA
InvalidatePathNew
DeleteKeyNameOriginal
IncrementRectExW
GetKeyNameExA
IsNotAppNameEx
ValidateKeyboardOld
CallDeviceOld
KillMutexOld
SetEvent
CancelRectNew
ValidateFolderPathExW
ShowComponentOld
OnDialogNew
GenerateHeaderNew
PutDialogNew
CallFolderPathOriginal
FormatClassExA
DeleteData
LoadDateNew
InvalidateFolderNew
AddFunctionEx
GenerateDeviceExA
FormatProviderEx
KillListEx
DeleteOptionNew
ModifyValue
CloseListExA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 1024B - Virtual size: 541B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f1387ba4968b7886aeae7c2e73ab89b

Headers

DLL Characteristics

File Characteristics

Imports

psapi

rtutils

user32

kernel32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 133KB

.Reel Size: 6KB - Virtual size: 10KB

.Re82 Size: 23KB - Virtual size: 23KB

.Lax503 Size: 1024B - Virtual size: 541B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 134KB - Virtual size: 133KB

.Reel
Size: 6KB - Virtual size: 10KB

.Re82
Size: 23KB - Virtual size: 23KB

.Lax503
Size: 1024B - Virtual size: 541B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB