0ba4b925b93d0f92bd45dc3349170112c96e495d00dd3e433e69afef555e6707

Sharing

Copy URL Twitter E-mail

General

Target

0ba4b925b93d0f92bd45dc3349170112c96e495d00dd3e433e69afef555e6707
Size

160KB
MD5

4065d6ec057956d27f35c7404705e050
SHA1

f48bae4b9c7d83a0dce46f1b58d853cd73f6737a
SHA256

0ba4b925b93d0f92bd45dc3349170112c96e495d00dd3e433e69afef555e6707
SHA512

65ce9e07952e689c9869fb7ab21bd9cb535ffdd98497eb12854068f65e7ff5473d0fde5f48eabf8507a0769ca0ffe97ac46ae186c5b9ae3216854f310aa14a59
SSDEEP

1536:RVX30pbSY5UL1hSLuICd5smk1FvfvS49Kv0d7uywaG1R8S1mauONhtl:Qpjf649r7xwaGMS12O

Score

N/A

Malware Config

Signatures

Files

0ba4b925b93d0f92bd45dc3349170112c96e495d00dd3e433e69afef555e6707
.exe windows x86

fd85775dd314e366f5c0517add3698c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

mfc42

ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2514
ord1232
ord2621
ord1134
ord641
ord656
ord825
ord1168
ord540
ord800
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord2302
ord6215
ord6199
ord537
ord3797
ord3092
ord860
ord4160
ord3081
ord3874
ord858
ord3499
ord2515
ord5572
ord2915
ord538
ord355
ord755
ord470
ord2764
ord1768
ord1175
ord4220
ord2584
ord3654
ord3663
ord2438
ord2863
ord1644
ord1146
ord2864
ord2379
ord6055
ord1776
ord5290
ord3402
ord3610
ord567
ord640
ord2414
ord2405
ord323
ord613
ord2450
ord289
ord6663
ord922
ord6648
ord6662
ord823
ord924
ord1576
ord1158
ord3571
ord3626
ord1641
ord1640
ord5785
ord4396
ord3574
ord609
ord4275
ord4284
ord2859
ord5981
ord5875
ord5788
ord5787
ord3693
ord3573
ord2575
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord535
ord1200

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_setmbcp
__setusermatherr
_controlfp
_exit
_XcptFilter
_onexit
__dllonexit
_mbscmp
_splitpath
strcat
__CxxFrameHandler
strcpy
memset

kernel32

CreateThread
GetWindowsDirectoryA
WinExec
GetShortPathNameA
GetLogicalDrives
GetModuleHandleA
GetStartupInfoA
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileStringA
WaitForSingleObject
OutputDebugStringA
GetProcAddress
OpenEventA
LoadLibraryA
GetDriveTypeA
GetLocaleInfoA
GetVersionExA

user32

EnableWindow
LoadIconA
SystemParametersInfoA
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
ShowWindow
keybd_event
SetForegroundWindow
FindWindowExA
LoadBitmapA
GetSysColor
GetWindowLongA
ReleaseCapture
PtInRect
CopyRect
InvalidateRect
SetCapture
GetFocus
GetParent
GetCapture
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
SendMessageA
LoadMenuA
InsertMenuA
GetSubMenu
AppendMenuA
DrawIcon
RegisterWindowMessageA
MessageBoxA
GetSystemMetrics
PostMessageA
GetCursorPos
FindWindowA
GetClassInfoA
TrackPopupMenu
MapVirtualKeyA

gdi32

RoundRect
CreateSolidBrush
CreatePen
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA
SHGetMalloc
ShellExecuteExA
SHGetSpecialFolderLocation

winmm

mixerOpen
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
mciSendCommandA
mixerGetDevCapsA

msimg32

TransparentBlt

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd85775dd314e366f5c0517add3698c7

Headers

File Characteristics

Imports

shlwapi

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

winmm

msimg32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 108KB - Virtual size: 128KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 108KB - Virtual size: 128KB