255b8dc06f2cd78852d3c7d9b6bc1c07cbf2ef1bcbe9c4b2b55a5609d4181219

Sharing

Copy URL Twitter E-mail

General

Target

255b8dc06f2cd78852d3c7d9b6bc1c07cbf2ef1bcbe9c4b2b55a5609d4181219
Size

237KB
MD5

6a671d73fcc188b1836dbdf3c63a3da5
SHA1

eb359621c63e4fb1e992a183b4351b199ccb32f5
SHA256

255b8dc06f2cd78852d3c7d9b6bc1c07cbf2ef1bcbe9c4b2b55a5609d4181219
SHA512

e2efda187975212467b125637588f027e9718894ba1ca19db8e55bcc5f9611d1d12cdfd408839b4ada8b09718a0430206be6438a3a5e886bd551a8df83d65640
SSDEEP

6144:jHgRUWzI5NRcVlRAikIExj0gTWi6U3mYGPaoN5ZfR:/pukjRWN2npKZ5

Score

N/A

Malware Config

Signatures

Files

255b8dc06f2cd78852d3c7d9b6bc1c07cbf2ef1bcbe9c4b2b55a5609d4181219
.exe windows x86

7c323bb2cf2b72b35ac7fa910100cec0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegEnumValueA
GetUserNameA

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

gdi32

SelectObject
DeleteDC
RestoreDC
DeleteObject
GetTextFaceA
GetTextMetricsA
CreateFontA
GetDeviceCaps
SetMapMode
SaveDC
Polyline
CreatePen
ExtTextOutW
GetTextExtentPoint32W
SetTextAlign
SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA

kernel32

GetStartupInfoA
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
ExitProcess
GetModuleHandleA
MapViewOfFile
IsDBCSLeadByte
GetCommandLineA
CloseHandle
CreateThread
Sleep
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetLastError
CreateMutexA
LoadLibraryA
SetUnhandledExceptionFilter
MulDiv
FreeLibrary
WideCharToMultiByte
IsBadReadPtr
GetModuleFileNameA
GetSystemDefaultLangID
GetProcAddress
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
GetVersionExA
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
lstrcpyA
GetTempPathA
GetProfileStringA
SetEvent
CreateSemaphoreA
CreateProcessW
HeapAlloc
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
DeleteFileW
GetTickCount
SetEnvironmentVariableA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
GetFileAttributesA
CreateDirectoryA
WriteFile
SetFilePointer
CreateFileW
LockResource
LoadResource
FindResourceExA
GetSystemDirectoryA
SetEndOfFile
ExpandEnvironmentStringsA
CreateProcessA
OpenProcess
SetLastError
SetThreadPriority
CreateRemoteThread
LoadLibraryExA
CreateEventA
SuspendThread
GetSystemTime
GetComputerNameA
TlsAlloc
TlsFree
TlsSetValue
VirtualFree
TlsGetValue
ExpandEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
ResumeThread
GetThreadSelectorEntry
GetThreadContext
HeapFree
VirtualAlloc
GetCurrentThreadId
TerminateThread
LCMapStringA
RtlUnwind
GetLocaleInfoA
IsValidCodePage

oleaut32

SysFreeString
VariantTimeToDosDateTime
SystemTimeToVariantTime
SysAllocString
SysStringLen

shell32

ExtractIconExA
ShellExecuteExA

user32

PostMessageA
GetClientRect
SendDlgItemMessageA
GetSysColor
SetWindowLongA
DestroyWindow
MessageBoxA
DrawIconEx
EnableWindow
CheckDlgButton
IsDlgButtonChecked
LoadStringA
LoadIconA
DrawFocusRect
SetWindowTextW
LoadCursorA
DestroyIcon
GetWindowPlacement
IsIconic
wsprintfW
LoadStringW
GetWindowThreadProcessId
EnumWindows
SendMessageTimeoutA
GetParent
UpdateWindow
CharPrevA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
SetCursor
InvalidateRect
GetScrollInfo
GetWindowLongA
wsprintfA
SetTimer
KillTimer
DefWindowProcA
PostQuitMessage
SendMessageA
SetScrollInfo
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
CreateWindowExA
RegisterClassExA
DialogBoxParamA
SetWindowPos
GetWindowRect
SystemParametersInfoA
CreateDialogParamW
SetDlgItemTextA
SetFocus
EndDialog
GetDlgItem
ShowWindow
GetDC
MapWindowPoints
DialogBoxParamW
GetSysColorBrush
CreateDialogParamA
SetWindowTextA
GetSystemMetrics
ReleaseDC
FillRect
SetForegroundWindow

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

wininet

InternetWriteFile
InternetCloseHandle
HttpQueryInfoA
InternetQueryOptionA
InternetSetOptionA
InternetReadFileExA
HttpEndRequestA
HttpSendRequestExA
InternetConnectA
InternetOpenA
InternetSetStatusCallback
InternetAutodial
InternetGetConnectedState
HttpOpenRequestA
InternetCanonicalizeUrlA

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7c323bb2cf2b72b35ac7fa910100cec0

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

user32

version

wininet

Sections

.text Size: 144KB - Virtual size: 140KB

.data Size: 4KB - Virtual size: 30KB

.rsrc Size: 80KB - Virtual size: 80KB

.text
Size: 144KB - Virtual size: 140KB

.data
Size: 4KB - Virtual size: 30KB

.rsrc
Size: 80KB - Virtual size: 80KB