2f09fa1a0722acc3cb8cf8ba659b72481243870c6f6d28b1b959f1d280a036c4

Sharing

Copy URL Twitter E-mail

General

Target

2f09fa1a0722acc3cb8cf8ba659b72481243870c6f6d28b1b959f1d280a036c4
Size

198KB
MD5

65a889027b41075696445aa4eb4392e0
SHA1

e38a9ce7f7632b9580ea2dbd92ad6cdb6d7fa0cf
SHA256

2f09fa1a0722acc3cb8cf8ba659b72481243870c6f6d28b1b959f1d280a036c4
SHA512

91558bd743989b7cfb7dc41f8aa8324900c7d154c6a328b2870b45b2c5ab8c72077adcd870c388bd20136e4317a39a1835c49f8d72a917c49af2760152f7f33c
SSDEEP

3072:0kdVa3bCxXY6kCa15ibOY6DnviKf0CuHTtPPlebUPx5X489iEXur10dgE8w9:0Kg3Y5U5FpvXRuH5PPlegPP/iVmeE8w

Score

N/A

Malware Config

Signatures

Files

2f09fa1a0722acc3cb8cf8ba659b72481243870c6f6d28b1b959f1d280a036c4
.exe windows x86

64d3cc13ba9aa3fac67b5a0b485961c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToDosDateTime
GetFileSize
GlobalFix
GetPrivateProfileStringA
SetFileTime
FindNextChangeNotification
CreateNamedPipeA
GetBinaryTypeW
SwitchToThread
GlobalWire
FileTimeToLocalFileTime
lstrlenA
GetModuleHandleW
GetFileSizeEx
RemoveDirectoryA
PeekNamedPipe
CreateWaitableTimerW
LocalUnlock
GetPrivateProfileIntW
SetTimerQueueTimer
WaitForDebugEvent
DnsHostnameToComputerNameW
GetTimeZoneInformation
InterlockedCompareExchange
GetCommMask
GetCurrencyFormatA
lstrcmpiA
WaitForSingleObjectEx
SearchPathA

advapi32

CryptReleaseContext
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
RegQueryValueExA
RegQueryValueExW
CryptDestroyKey
RegCloseKey
CredWriteW
GetLengthSid
CheckTokenMembership
CryptAcquireContextA
CryptExportKey
RegOpenKeyExW
GetUserNameW
RegOpenKeyExA

secur32

LsaFreeReturnBuffer

crypt32

CertCreateCertificateContext

user32

SetWindowLongW
ScreenToClient
GetDC
GetFocus
GetDesktopWindow
SetScrollInfo
DrawTextW
CreateCaret
DdeCreateStringHandleW
IsWindow
ClientToScreen
SendDlgItemMessageW
SetScrollPos
GetDlgItem
GetScrollInfo
CallMsgFilterA
CreateDialogParamW
DrawStateW
SetWindowPos
ReleaseDC
DestroyCursor
FillRect
EndPaint
SetDlgItemTextW
GetSysColor
SendNotifyMessageA
GetParent
LoadCursorW
LoadIconW
PostMessageW
GetActiveWindow
GetSysColorBrush
DestroyWindow
InvalidateRect
GetWindow
SendMessageW
GetDlgItemTextW
CallWindowProcW
EnableWindow
SetTimer
KillTimer
GetWindowRect
GetNextDlgTabItem
SetCursor
BeginPaint
UpdateWindow
ShowWindow
SetFocus
CountClipboardFormats
UnregisterClassA
BroadcastSystemMessageW
ScrollWindowEx
MoveWindow
DdeAbandonTransaction
DlgDirListComboBoxA
SystemParametersInfoW
GetPropW
GetWindowTextW
DragObject
GetWindowTextLengthW
DefWindowProcW
EndDialog
GetWindowLongW
MapWindowPoints

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64d3cc13ba9aa3fac67b5a0b485961c6

Headers

File Characteristics

Imports

kernel32

advapi32

secur32

crypt32

user32

Sections

.text Size: 118KB - Virtual size: 118KB

.data Size: 19KB - Virtual size: 47KB

.rdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 55KB - Virtual size: 55KB

.text
Size: 118KB - Virtual size: 118KB

.data
Size: 19KB - Virtual size: 47KB

.rdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 55KB - Virtual size: 55KB