86186575ae70d7fabaa7dab35a041ea01a6f9ef1897ec8b168696e2fe80b6ec5

Sharing

Copy URL Twitter E-mail

General

Target

86186575ae70d7fabaa7dab35a041ea01a6f9ef1897ec8b168696e2fe80b6ec5
Size

316KB
MD5

60313f40100d340dd565251683b71770
SHA1

3ba5b893b78c2d6473cf807793dc232de224168f
SHA256

86186575ae70d7fabaa7dab35a041ea01a6f9ef1897ec8b168696e2fe80b6ec5
SHA512

2f44cde89e76faf7bcea1b29c0efaea4ce72412c59680d6956ae860ddeb379db043fd429337e5be46440990f4462068c4810abb8d2c8771892d8d7bc9e927275
SSDEEP

6144:Ci+jGqiL+VfOZuAdApR6vDe3PfcKrKyw+aT/aNQRHIVXcg7/KPjkXHrFZC:CiQe6VfOZuAdLWdGyMy+HINcU/KYXHrS

Score

N/A

Malware Config

Signatures

Files

86186575ae70d7fabaa7dab35a041ea01a6f9ef1897ec8b168696e2fe80b6ec5
.exe windows x86

fa633dcdeef70a62fffb175e1e82e9aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
LocalFree
FormatMessageW
CreateProcessW
CopyFileW
GetPrivateProfileStringW
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
Sleep
GetLongPathNameW
OpenProcess
GetModuleFileNameW
GetModuleHandleW
CompareStringW
SetFilePointer
WideCharToMultiByte
WriteConsoleA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WriteConsoleW
SetEndOfFile
FlushFileBuffers
GetLastError
GetTempFileNameW
MoveFileExW
WaitForSingleObject
GetConsoleOutputCP
CloseHandle
GetProcessHeap
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapAlloc
SetFileAttributesW
GetFileAttributesW
DeleteFileW
GetDriveTypeW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
HeapFree
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
ExitThread
GetCurrentThreadId
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetDriveTypeA
HeapReAlloc
CreateFileA
GetProcAddress
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualAlloc
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetEnvironmentVariableA
GetConsoleCP
GetConsoleMode
GetModuleHandleA
RaiseException
HeapSize
CompareStringA

user32

ScreenToClient
SendMessageW
DialogBoxParamW
EndDialog
SetWindowTextW
LoadIconW
GetDC
DrawTextW
GetDlgItem
GetParent
GetClientRect
ReleaseDC
SetTimer
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos

gdi32

SelectObject

wsock32

ntohl

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

comctl32

InitCommonControlsEx

shell32

ShellExecuteExW

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa633dcdeef70a62fffb175e1e82e9aa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

wsock32

advapi32

comctl32

shell32

Sections

.text Size: 109KB - Virtual size: 108KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 94KB - Virtual size: 93KB

.reloc Size: 8KB - Virtual size: 7KB

.rrdata Size: 76KB - Virtual size: 76KB

.text
Size: 109KB - Virtual size: 108KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 8KB - Virtual size: 7KB

.rrdata
Size: 76KB - Virtual size: 76KB