327c9c8e8d968b79e906dfe155872a66e714213a677a70681619c6633352805c

Sharing

Copy URL Twitter E-mail

General

Target

327c9c8e8d968b79e906dfe155872a66e714213a677a70681619c6633352805c
Size

1.4MB
MD5

646451dd40dee90ddbb64eb624e2f3e5
SHA1

efc1e123e47b09be5ee58370bda0777f4d5d3209
SHA256

327c9c8e8d968b79e906dfe155872a66e714213a677a70681619c6633352805c
SHA512

d0b814b5f02a4bee281b6370b87ca59bcce6173634af22b32fedcf5801eb310a940682f40c8eaba403218f6696316fdc49ed915c2f749e4793ad88330110a050
SSDEEP

24576:Uxw/2tlkPsa2Y5oMC88yNwXHQqJailII+uPHK/ERDxek9/dijQqumNhoKpaEnnMf:u3+saH4M/ERdMumNhoKpaEnnMPCN9z4r

Score

N/A

Malware Config

Signatures

Files

327c9c8e8d968b79e906dfe155872a66e714213a677a70681619c6633352805c
.exe windows x86

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
timeGetTime

shlwapi

SHDeleteKeyA

setupapi

SetupIterateCabinetA

kernel32

GetLastError
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
GetVolumeInformationA
GetSystemDirectoryA
CloseHandle
OpenSemaphoreA
OutputDebugStringA
SetFileAttributesA
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
GetCurrentThreadId
GetExitCodeProcess
TerminateProcess
CreateProcessA
GetModuleHandleA
CreateFileA
FindClose
GetDateFormatA
SystemTimeToTzSpecificLocalTime
IsBadWritePtr
GetSystemTime
Sleep
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
EnumSystemLocalesA
GetCurrentDirectoryA
EnumResourceNamesA
InitializeCriticalSection
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
VirtualQuery
GetOEMCP
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
GetTimeZoneInformation
TlsFree
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapAlloc
ExitProcess
HeapFree
GetCommandLineA
DeleteFileA
GetFileAttributesA
FindFirstFileA
SetFilePointer
ReadFile
WriteFile
lstrlenA
GetModuleFileNameA
SetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
IsValidLocale
IsValidCodePage
FileTimeToSystemTime
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
LoadLibraryA
DeleteCriticalSection
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LocalFree
MultiByteToWideChar

user32

RegisterClassExA
GetWindowLongA
DefWindowProcA
CreateWindowExA
ReleaseCapture
ClientToScreen
BeginPaint
EndPaint
InvalidateRect
SetCursor
PtInRect
LoadIconA
SystemParametersInfoA
UpdateWindow
ShowWindow
SetFocus
SendMessageA
SetWindowRgn
EnumChildWindows
GetClassNameA
GetWindowRect
SetWindowPos
LoadBitmapA
GetClientRect
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
CopyIcon
SetSystemCursor
PostThreadMessageA
MessageBoxA
IsWindow
PostQuitMessage
PostMessageA
SetWindowLongA
LoadStringA
GetParent
FindWindowA
SetRect
MoveWindow
SetCapture

gdi32

ExtCreateRegion
CreateCompatibleDC
DeleteDC
StretchBlt
SelectObject
BitBlt
CreateRectRgn
OffsetRgn
CombineRgn
GetObjectA
DeleteObject
CreateDIBSection

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

Imports

winmm

shlwapi

setupapi

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 200KB - Virtual size: 198KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 92KB - Virtual size: 92KB

.text
Size: 200KB - Virtual size: 198KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 92KB - Virtual size: 92KB