5d4acf86a0d58e62ffba9f273afd306ac3d23782c1bf2db611408946c17e4c00

Sharing

Copy URL Twitter E-mail

General

Target

5d4acf86a0d58e62ffba9f273afd306ac3d23782c1bf2db611408946c17e4c00
Size

117KB
MD5

6d3e502efd2cef88f440789657c9dc2b
SHA1

658bbfcf8898f64625c22f19318ef65a5ba28471
SHA256

5d4acf86a0d58e62ffba9f273afd306ac3d23782c1bf2db611408946c17e4c00
SHA512

02b8480329b59678f57ab0eb210278a723c058a1037940fd32119d73caade99e47ad4c26fef3a6c63359f552732002a23474dc0793813d7c2cf493f7cb6acc82
SSDEEP

3072:rPhYFHZkcDNbUd8lXTHFYfWy4poDUBq8F16Y+kXZ5F+VH8H:lYRphUaYapoDUBq8F16Y+eUV

Score

N/A

Malware Config

Signatures

Files

5d4acf86a0d58e62ffba9f273afd306ac3d23782c1bf2db611408946c17e4c00
.exe windows x86

f43fe645a64418f8398bcacacaf88454

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
lstrcmpW
GetModuleHandleW
GlobalLock
LoadResource
CreateProcessW
EnterCriticalSection
GetStartupInfoW
DeleteCriticalSection
GlobalHandle
lstrcmpiW
LeaveCriticalSection
QueryPerformanceCounter
IsProcessorFeaturePresent
VerifyVersionInfoW
GetCurrentProcess
LoadLibraryA
GlobalUnlock
ReadFile
GetCurrentThreadId
RaiseException
lstrlenW
InterlockedExchange
GetStdHandle
VerSetConditionMask
MultiByteToWideChar
InitializeCriticalSection
SetLastError
InterlockedCompareExchange
GetModuleFileNameW
GetSystemTimeAsFileTime
CompareStringW
FreeLibrary
FindResourceW
SizeofResource
TerminateProcess
CloseHandle
HeapFree
LoadLibraryExW
GetCurrentProcessId
GetLastError
FlushInstructionCache
LockResource
WaitForSingleObject
GlobalFree
GlobalAlloc
SetUnhandledExceptionFilter
SetProcessShutdownParameters
PeekNamedPipe
VirtualAlloc
GetProcAddress
GetProcessHeap
OutputDebugStringW
MulDiv
Sleep
VirtualFree
HeapAlloc
GetVersion
VirtualProtect
GetTickCount
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
IsDebuggerPresent
ExitProcess

user32

MessageBoxW
CreateDialogParamW
ClientToScreen
GetPropW
IntersectRect
GetMenuItemCount
DestroyAcceleratorTable
ExitWindowsEx
DestroyIcon
SendDlgItemMessageW
SetCursor
GetActiveWindow
GetCursorPos
SetWindowRgn
IsMenu
FillRect
OffsetRect
GetClassInfoExW
GetDesktopWindow
LoadImageW
DrawFocusRect
SetWindowPos
IsIconic
GetWindowTextLengthW
SetTimer
SetRectEmpty
GetWindowTextW
GetClientRect
SetActiveWindow
PostMessageW
GetWindowRect
GetCapture
CreateDialogIndirectParamW
EnableMenuItem
GetSystemMenu
SendNotifyMessageW
FindWindowExW
GetParent
DialogBoxParamW
MapWindowPoints
SetRect
GetNextDlgTabItem
GetWindowLongW
DefWindowProcW
SetWindowLongW
DestroyWindow
FlashWindowEx
InvalidateRect
GetClipboardData
IsZoomed
GetAncestor
OpenClipboard
InvalidateRgn
SetForegroundWindow
GetDlgItem
MoveWindow
ScreenToClient
CharNextW
GetMenuItemID
AppendMenuW
CloseClipboard
GetUpdateRgn
IsWindow
GetSysColorBrush
TrackMouseEvent
UnregisterClassA
LoadCursorW
GetClassNameW
EnumDisplayMonitors
UpdateWindow
InflateRect
CreateWindowExW
ReleaseDC
IsRectEmpty
CreatePopupMenu
GetMenuState
TranslateMessage
GetSystemMetrics
GetDlgCtrlID
GetDC
IsChild
GetWindowPlacement
RegisterWindowMessageW
InsertMenuItemW
GetFocus
MessageBeep
PostQuitMessage
DrawIconEx
CallWindowProcW
GetWindow
GetMenuItemInfoW
GetMonitorInfoW
DispatchMessageW
PeekMessageW
LoadBitmapW
DrawTextW
LockWindowUpdate
IsWindowEnabled
CreateAcceleratorTableW
MonitorFromWindow
GetForegroundWindow
GetIconInfo
KillTimer
SystemParametersInfoW
CopyRect
EnableWindow
SetWindowTextW
ReleaseCapture
RedrawWindow
TrackPopupMenuEx
GetSysColor
IsWindowVisible
IsDialogMessageW
EqualRect
EndDialog
GetMessagePos
SetFocus
ShowWindow
PtInRect
CharPrevW
SetCapture
CreateMenu
SendMessageW
RegisterClassExW
GetMessageTime
EndPaint
GetKeyState
SetWindowPlacement
DestroyMenu
MonitorFromRect
BeginPaint

gdi32

BitBlt
GetTextExtentPoint32W
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateSolidBrush
SetDCPenColor
GetTextMetricsW
SetTextColor
CreateRectRgn
DeleteObject
GetDeviceCaps
CreateFontIndirectW
SetBkMode
SetBkColor
GetClipRgn
CombineRgn
GetObjectW
SetDCBrushColor
Polyline
CreateCompatibleDC
SelectObject
RectInRegion
SelectClipRgn

comdlg32

GetOpenFileNameW

advapi32

RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW

shell32

ExtractIconExW
ShellExecuteW

oleaut32

SysAllocStringByteLen
VariantInit
SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
GetErrorInfo
SysStringByteLen
VarUI4FromStr
LoadTypeLi
VariantClear
LoadRegTypeLi
OleCreateFontIndirect

comctl32

_TrackMouseEvent

avifil32

AVIStreamWriteData

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f43fe645a64418f8398bcacacaf88454

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

comctl32

avifil32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 42KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 42KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB