5f29fd9ee6f0e3cfc7b58babf0603aec4b80ff798e51d5d18e5051bcf7aa1415

Sharing

Copy URL

Twitter E-mail

General

Target

5f29fd9ee6f0e3cfc7b58babf0603aec4b80ff798e51d5d18e5051bcf7aa1415
Size

201KB
MD5

6c5d915ca14706b2a638a74d00462cd0
SHA1

3f093a77ef7d7a063772615a099869350d97f962
SHA256

5f29fd9ee6f0e3cfc7b58babf0603aec4b80ff798e51d5d18e5051bcf7aa1415
SHA512

6fee73c749648764cfc1756d416a61bd887912b967fc0babeaa9f8aad832154a643a12640ce4af0d12251cc8d11c3cbe1e986d4968ec422d82d7463d9322182e
SSDEEP

6144:Cif8zIuCVYlxqfYTniz7KrHSF62oRludqw:B8zBQiqfYzg7KLq6KdL

Score

N/A

Malware Config

Signatures

Files

5f29fd9ee6f0e3cfc7b58babf0603aec4b80ff798e51d5d18e5051bcf7aa1415
.exe windows x86

3f1387ba4968b7886aeae7c2e73ab89b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleInformation
QueryWorkingSet

rtutils

TracePrintfW

user32

LoadMenuA
AppendMenuW
ScrollWindowEx
KillTimer
GetClassNameW
GetKeyState
GetTopWindow
wvsprintfW
MonitorFromPoint
RegisterClassExA
TabbedTextOutW
RegisterClassW
DestroyCursor
CharUpperW
SetWindowTextA
ClientToScreen
CopyAcceleratorTableW
SetRect
CopyImage
CascadeWindows
GetWindowLongW
EnableWindow
SetWindowLongA
TranslateAcceleratorW
SetTimer
DefWindowProcW
LoadAcceleratorsA
GetScrollPos
GetSysColorBrush
SetScrollPos
GetDoubleClickTime
GetKeyboardLayoutNameW
IsCharAlphaW
ChildWindowFromPointEx
wsprintfW
InSendMessage
CharUpperBuffW
ClipCursor
CheckMenuItem
TrackPopupMenuEx
IsChild
SetMenuItemInfoW
LoadCursorA
PostMessageW
SetRectEmpty
GetWindowDC
DialogBoxParamA
TrackPopupMenu
WaitForInputIdle
GetScrollRange
DrawTextW
LoadMenuW
FindWindowA
GetMessageW
DefFrameProcA
InvertRect
SetWindowRgn
AppendMenuA
CharUpperA
GetDlgItemTextA
GetWindowTextLengthW
BringWindowToTop
GrayStringW
AllowSetForegroundWindow
GetWindow
DrawStateW
PostThreadMessageW
GetDlgItem
InternalGetWindowText
DestroyCaret
DispatchMessageW
RegisterClassExW
GetUserObjectInformationW
SendMessageTimeoutA
GetClassLongW
GetShellWindow
BeginPaint
SendDlgItemMessageW
CharToOemA
CharToOemBuffA
DrawAnimatedRects
GetKeyNameTextW
SetLastErrorEx
MessageBoxA
GetDlgItemTextW
LoadBitmapA
DrawStateA
EnumChildWindows
GetMenuItemID
MessageBoxW
IsMenu
SystemParametersInfoW
DrawIcon
GetForegroundWindow
HiliteMenuItem
GetMenuStringA
SystemParametersInfoA
MapVirtualKeyW
CharUpperBuffA
AdjustWindowRectEx
SendMessageTimeoutW
DeferWindowPos
GetParent
CharNextW

kernel32

IsBadStringPtrW
DeleteAtom
GetStartupInfoA
GlobalCompact
GetFileAttributesExW
lstrcpyW
SetCommBreak
GetSystemDirectoryW
GetThreadContext
CreateWaitableTimerW
FindFirstFileW
MultiByteToWideChar
CreateFileA
GetVersionExW
GetShortPathNameA
WaitForSingleObject
OpenEventA
GetSystemTime
GetFullPathNameW
LocalLock
FreeLibrary
TransactNamedPipe
CallNamedPipeW
GetLocaleInfoA
EnumResourceNamesA
DeleteCriticalSection
SearchPathW
MapViewOfFile
SetThreadContext
CreateSemaphoreA
GetTempPathW
SetTimerQueueTimer
MoveFileExA
GetFileSize
GetCurrentThread
FindResourceExA
SetSystemTimeAdjustment
WriteFile
LCMapStringW
SystemTimeToFileTime
EnumSystemLocalesA
GetVersion
LoadLibraryExW
PulseEvent
GetComputerNameExA
FindNextChangeNotification
lstrcmpiW
DeleteFileA
SetHandleCount
GetTempFileNameA
GetTickCount
HeapLock
LoadLibraryW
HeapAlloc
LoadLibraryA
CreatePipe
GetModuleHandleW
lstrcpynW
lstrcatW
WaitForSingleObjectEx
FormatMessageA
IsValidLocale
SetCommState
GetThreadLocale
WideCharToMultiByte
ReleaseMutex
lstrcmpA
GlobalReAlloc
GetUserDefaultUILanguage
HeapReAlloc
GetCurrentDirectoryW
GetVersionExA
CreateMutexW
SetCommMask
lstrcmpiA
LocalAlloc
TlsGetValue
CompareStringA
FindFirstChangeNotificationW
SetCurrentDirectoryW
GetFullPathNameA
lstrlenA
GetSystemTimeAsFileTime
GetTimeFormatA
RemoveDirectoryW
FindResourceW
GetSystemDefaultLangID
GlobalUnlock
GetStartupInfoW
FreeResource
SetCurrentDirectoryA
ReadFile
IsBadCodePtr
GetComputerNameA
DeviceIoControl
GetWindowsDirectoryW
LCMapStringA
GetAtomNameA
GlobalMemoryStatus
InitializeCriticalSection
SetFileTime
GetWindowsDirectoryA
GetSystemTimeAdjustment
GetCPInfo
GetNumberFormatA

Exports

Exports

RemoveArgumentNew
RemoveFolderPath
CallFolderA
HideKeyboard
CancelStringExA
InvalidatePathNew
DeleteKeyNameOriginal
IncrementRectExW
GetKeyNameExA
IsNotAppNameEx
ValidateKeyboardOld
CallDeviceOld
KillMutexOld
SetEvent
CancelRectNew
ValidateFolderPathExW
ShowComponentOld
OnDialogNew
GenerateHeaderNew
PutDialogNew
CallFolderPathOriginal
FormatClassExA
DeleteData
LoadDateNew
InvalidateFolderNew
AddFunctionEx
GenerateDeviceExA
FormatProviderEx
KillListEx
DeleteOptionNew
ModifyValue
CloseListExA

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 1024B - Virtual size: 541B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f1387ba4968b7886aeae7c2e73ab89b

Headers

DLL Characteristics

File Characteristics

Imports

psapi

rtutils

user32

kernel32

Exports

Exports

Sections

.text Size: 158KB - Virtual size: 157KB

.Reel Size: 6KB - Virtual size: 10KB

.Re82 Size: 23KB - Virtual size: 23KB

.Lax503 Size: 1024B - Virtual size: 541B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 158KB - Virtual size: 157KB

.Reel
Size: 6KB - Virtual size: 10KB

.Re82
Size: 23KB - Virtual size: 23KB

.Lax503
Size: 1024B - Virtual size: 541B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 5KB - Virtual size: 5KB