d0fb4e9745aa8816cd3e9278bff75506ddaf1a8e53140487d48dabc96a6957ea

Sharing

Copy URL Twitter E-mail

General

Target

d0fb4e9745aa8816cd3e9278bff75506ddaf1a8e53140487d48dabc96a6957ea
Size

192KB
MD5

61f08b1f143eca5aecd19e2dc15aae00
SHA1

1742a8a45558f7ec52498399e6305ed3133aa072
SHA256

d0fb4e9745aa8816cd3e9278bff75506ddaf1a8e53140487d48dabc96a6957ea
SHA512

1d4930b3368c693c7c5007401f1624037f993f702d800189eb02474a793e2b0b63788afbfd503b99843db2c0461053ecf8bc30c50da6b51c859d7d026a4cf491
SSDEEP

3072:6o4C5XtgQXAg/lwv2thxa/rMjlbsmpD6d0L3caBQ3mVtJ93FLEk:JtXtgU/PjyrMjlb9NI0L3caBQ6ZFwk

Score

N/A

Malware Config

Signatures

Files

d0fb4e9745aa8816cd3e9278bff75506ddaf1a8e53140487d48dabc96a6957ea
.exe windows x86

bd653b0c319981f28a2fb323427141b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellAboutW

advapi32

RegCreateKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey

oleaut32

SysFreeString
SysAllocString

ole32

CoCreateInstance

ntdll

WinSqmAddToStream

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineW
GetProfileIntW
LocalAlloc
LocalFree
lstrcmpW
GetProfileStringW
LocalReAlloc
TerminateProcess
lstrlenW
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
CreateEventW
ResetEvent
GlobalUnlock
GlobalSize
GlobalLock
Sleep
GlobalFree
GlobalAlloc
GlobalReAlloc
GetCurrentProcess
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
HeapSetInformation
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange

gdi32

SetTextColor
CreateFontIndirectW
SelectObject
DeleteObject
SetBkColor
SetBkMode

user32

SetDlgItemTextW
CheckMenuItem
CheckMenuRadioItem
SetWindowPos
OffsetRect
MapWindowPoints
GetClientRect
EnableWindow
LoadMenuW
SetWindowLongW
GetWindowLongW
GetMenu
CreateDialogParamW
GetDlgItem
DestroyMenu
DestroyWindow
SetMenu
GetWindowRect
SystemParametersInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsChild
IsDialogMessageW
GetMessageW
LoadAcceleratorsW
SendMessageW
LoadStringW
SetProcessDefaultLayout
GetProcessDefaultLayout
SetProcessDPIAware
SetCursor
SetFocus
SetWindowTextW
CheckRadioButton
GetSubMenu
MessageBeep
MessageBoxW
EndDialog
DialogBoxParamW
GetSysColor
CloseClipboard
CharNextA
GetClipboardData
OpenClipboard
CallWindowProcW
HideCaret
DefWindowProcW
EnableMenuItem
IsClipboardFormatAvailable
GetDlgCtrlID
PostQuitMessage
DrawTextW
CheckDlgButton
GetWindowTextW
SetDlgItemInt
CharNextW
RegisterClassExW
GetSysColorBrush
LoadCursorW
LoadIconW
InvalidateRect
UpdateWindow
ShowWindow
CreateWindowExW

msvcrt

_wcsrev
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??3@YAXPAX@Z
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler4_common
_controlfp
memmove
toupper
_CxxThrowException
wcstoul
__CxxFrameHandler3
memset
memcpy
wcschr

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd653b0c319981f28a2fb323427141b9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

advapi32

oleaut32

ole32

ntdll

kernel32

gdi32

user32

msvcrt

Sections

.text Size: 75KB - Virtual size: 75KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 86KB - Virtual size: 86KB

.reloc Size: 26KB - Virtual size: 26KB

.text
Size: 75KB - Virtual size: 75KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 86KB - Virtual size: 86KB

.reloc
Size: 26KB - Virtual size: 26KB