53cf9d49c80bc5b59901d1848b6a356515e31f3a20286134e3db997ff2a5e047

Sharing

Copy URL Twitter E-mail

General

Target

53cf9d49c80bc5b59901d1848b6a356515e31f3a20286134e3db997ff2a5e047
Size

252KB
MD5

40c8c138a966dc3f61e55526834d8590
SHA1

367fd00c3ed0c7b27799542fb4128f721a524b96
SHA256

53cf9d49c80bc5b59901d1848b6a356515e31f3a20286134e3db997ff2a5e047
SHA512

d41709cd77f7a336bbfff75cf54d72c32ad3bd1b24ed6284ca5476c4bf958dba721754af828f2674e2c64f18b774e2a67db1caf523284adbb2d1ef54c767332b
SSDEEP

6144:FId079u0236C/DkLqMAo74a3l/wOjjf0jF1zLYpH/XRe:CEALkuMAojYO30jFOpH/

Score

N/A

Malware Config

Signatures

Files

53cf9d49c80bc5b59901d1848b6a356515e31f3a20286134e3db997ff2a5e047
.exe windows x86

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
GetLocalTime
GetProcAddress
LoadLibraryA

user32

EnableWindow
SetForegroundWindow
SendMessageW
GetMenuState
ShowCaret
CreateAcceleratorTableW
SetTimer
GetMenuItemID
GetMenuInfo
PostMessageW
GetCapture
CreateDesktopA
GetSubMenu
wsprintfA
CreateDialogIndirectParamW
LoadMenuW
AppendMenuA
CharPrevA
SetWindowTextW
SetDlgItemInt
TrackPopupMenuEx
GetForegroundWindow
GetSysColor
TrackPopupMenu
IsWindow
LoadIconA
wsprintfW
GetDlgItemTextA
GetMessageW
DialogBoxParamA
AdjustWindowRect
GetCursorPos
CopyIcon
MonitorFromPoint
CreateDialogParamA
GetKeyState
SetCursor
CharNextA
SetDlgItemTextW
GetDCEx

advapi32

RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA

shell32

SHGetDesktopFolder

security

SealMessage
CompleteAuthToken

gdi32

CreatePolygonRgn
CreateScalableFontResourceW
StretchDIBits
GetTextExtentPointA
SelectBrushLocal
CreateFontIndirectExA
AddFontResourceW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xSHu
Size: 2KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xCaD
Size: 104KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 4KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oBZ
Size: 5KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Pi
Size: 105KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

security

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 41KB

.xSHu Size: 2KB - Virtual size: 476KB

.xCaD Size: 104KB - Virtual size: 172KB

.G Size: 4KB - Virtual size: 125KB

.oBZ Size: 5KB - Virtual size: 464KB

.data Size: 6KB - Virtual size: 379KB

.Pi Size: 105KB - Virtual size: 166KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 41KB

.xSHu
Size: 2KB - Virtual size: 476KB

.xCaD
Size: 104KB - Virtual size: 172KB

.G
Size: 4KB - Virtual size: 125KB

.oBZ
Size: 5KB - Virtual size: 464KB

.data
Size: 6KB - Virtual size: 379KB

.Pi
Size: 105KB - Virtual size: 166KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 4KB