5671e2378589907557c3d0ec9a6eca5bea833a87bb30b1292520c28b7ab36f8a

Sharing

Copy URL Twitter E-mail

General

Target

5671e2378589907557c3d0ec9a6eca5bea833a87bb30b1292520c28b7ab36f8a
Size

135KB
MD5

6c2fc4f836d11755400fc5e56f4fbdb0
SHA1

a013f7b20a01f58488e0d9974f94f048669af668
SHA256

5671e2378589907557c3d0ec9a6eca5bea833a87bb30b1292520c28b7ab36f8a
SHA512

69f6a0541f7c71e850b819f6c44069d553124de7091b56faa6aa1a0e9c8268622feb80dbbd72cfb2194ab632e4615a9ad998b9bafcc8114b764449316d83719c
SSDEEP

3072:pPZWDkQvQ/lyuRSSFYNZk7mLTaKs3s8DUp:e1QdyqbuvyUp

Score

N/A

Malware Config

Signatures

Files

5671e2378589907557c3d0ec9a6eca5bea833a87bb30b1292520c28b7ab36f8a
.exe windows x86

19f0dabe163af1d54f3320aff5518ce1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetLastError
RaiseException
VirtualAlloc
GetStringTypeW
CompareStringA
WideCharToMultiByte
GlobalUnlock
GetPrivateProfileStringA
GetACP
GetVersionExA
GlobalAlloc
FreeEnvironmentStringsA
GetFileInformationByHandle
HeapCreate
Sleep
GetOEMCP
GetStringTypeA
GetEnvironmentVariableA
CreateThread
SetCurrentDirectoryA
LCMapStringA
SetEnvironmentVariableA
FreeLibrary
GetStartupInfoA
GetEnvironmentStringsW
HeapDestroy
UnhandledExceptionFilter
SetStdHandle
SetFilePointer
GetEnvironmentStrings
GetCurrentProcess
FileTimeToSystemTime
CreateDirectoryA
GetStdHandle
LCMapStringW
MultiByteToWideChar
GetFileType
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
CompareStringW
GlobalLock
CreatePipe
FlushFileBuffers
RtlUnwind
DuplicateHandle
FreeEnvironmentStringsW
GetTimeZoneInformation
GetCurrentDirectoryA
FileTimeToLocalFileTime
VirtualFree
SetHandleCount
GetPrivateProfileIntA
PeekNamedPipe
SetEndOfFile
WriteFile
GetVersion
CloseHandle
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
LockResource
LoadLibraryA
GetLocalTime
GetProcAddress
ReadFile
GetProcessHeap
HeapFree
HeapAlloc
lstrlenA
CreateFileA
CreateProcessA
ExitProcess

user32

PostQuitMessage
InvalidateRect
CreateWindowExA
SetMenuDefaultItem
ReleaseCapture
SetClassLongA
RegisterWindowMessageA
PtInRect
DefFrameProcA
IsZoomed
GetSysColor
SetWindowPos
LoadCursorA
TrackPopupMenu
SetWindowTextA
ReleaseDC
SetTimer
UpdateWindow
GetCursorPos
SetWindowLongA
GetWindowRect
RegisterClassExA
EmptyClipboard
SetCapture
OpenClipboard
IsIconic
DefMDIChildProcA
BeginPaint
EnableWindow
GetSystemMetrics
GetClientRect
GetKeyState
DialogBoxParamA
SetClipboardData
GetDlgItem
GetWindowTextLengthA
MoveWindow
IsClipboardFormatAvailable
CopyRect
GetSubMenu
SendDlgItemMessageA
PostMessageA
EnableMenuItem
MessageBoxA
GetWindowPlacement
DispatchMessageA
DeleteMenu
GetWindowTextA
EndDialog
MessageBeep
GetMessageA
ShowWindow
LoadImageA
DestroyIcon
ClientToScreen
GetDC
GetClipboardData
IsWindow
EndPaint
LoadMenuA
SendMessageA
KillTimer
LoadIconA
GetWindow
DestroyMenu
SetFocus
SetForegroundWindow
TranslateMessage
AppendMenuA
CheckMenuItem
CloseClipboard
wsprintfA
ModifyMenuA

gdi32

GetDeviceCaps
GetTextExtentPoint32A
ExtTextOutA
GetPixel
SetMapMode
GetStockObject
LineTo
CreateRectRgn
SetPolyFillMode
Rectangle
BitBlt
DeleteDC
SelectObject
CreateFontIndirectA
Polygon
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
CreatePen
SelectClipRgn
CreateBitmap
CreateSolidBrush
SetStretchBltMode
ExtSelectClipRgn
StretchBlt
SetTextColor
GetMapMode
GetObjectA
SetBkColor
CreateDCA
MoveToEx

shell32

ShellExecuteA
Shell_NotifyIconA
SHAppBarMessage
SHGetSpecialFolderPathA

winmm

PlaySoundA

wsock32

recv
gethostbyname
WSAAsyncSelect
WSACleanup
htons
gethostname
WSAStartup
send
closesocket
connect
WSAGetLastError
socket

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19f0dabe163af1d54f3320aff5518ce1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

winmm

wsock32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 35KB - Virtual size: 100KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 35KB - Virtual size: 100KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 1KB - Virtual size: 1KB