531c729af8e992e6444b1e17ca52353404944af4439665e406d6b27410faa823

Sharing

Copy URL

Twitter E-mail

General

Target

531c729af8e992e6444b1e17ca52353404944af4439665e406d6b27410faa823
Size

565KB
MD5

4b55068fb87b6e9c4640388f2e2f8951
SHA1

45059d384897aac8c2f04aef35bfdc40388206e0
SHA256

531c729af8e992e6444b1e17ca52353404944af4439665e406d6b27410faa823
SHA512

4a2045e5a36f6bccbd0a5a8b4e4f67e0857ba026491fae2d96f76a95782e43705c6dbeb47d569db27e011e9c2e7a08b2739a0705de63414fbcc32e51e2e9cc7b
SSDEEP

12288:1eoGiLaw18D2SEwK7q74AlEmlsApC8COxH3c9k0xCFPs:MQL1SEDO7JlsApC8dxXqUPs

Score

N/A

Malware Config

Signatures

Files

531c729af8e992e6444b1e17ca52353404944af4439665e406d6b27410faa823
.exe windows x86

093a51e0b7dcb2466b7edfd78d191aa0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
FindClose
OpenEventW
GetLocalTime
InterlockedCompareExchange
GetStringTypeW
FindNextFileW
GetLongPathNameW
GetConsoleMode
GlobalSize
GetProcAddress
HeapAlloc
MultiByteToWideChar
GetACP
FindResourceW
ResumeThread
GetModuleFileNameW
TlsAlloc
UnhandledExceptionFilter
GetTimeFormatW
LoadLibraryA
VirtualAlloc
lstrcpynW

user32

InsertMenuW
SetScrollRange
PostMessageW
CharLowerW
EnableMenuItem
GetSystemMetrics
GetDlgItemTextW
GetKeyboardState
InflateRect
LoadIconW
CloseClipboard
DrawFrameControl
CreateDialogParamW
RealChildWindowFromPoint
CreateCaret
ScreenToClient
GetWindowRect
ShowScrollBar
GetScrollPos
SetFocus
RemoveMenu
CreateCursor

gdi32

AddFontResourceW
GetTextExtentPoint32W
CreateCompatibleBitmap
RemoveFontResourceW
EndDoc
BitBlt
CreateFontIndirectW
DeleteDC
GetROP2
CreatePen
OffsetWindowOrgEx
SelectObject
DeleteObject
CreateBitmap
GetTextMetricsW

comdlg32

ChooseColorW
GetOpenFileNameW
PrintDlgW
GetSaveFileNameW

advapi32

IsTextUnicode
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW

ole32

OleDuplicateData

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zydocyz
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ieinset
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xagvyvx
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vnwypvr
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vhcbaqh
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dktfhkd
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hmvwojo
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pcelwtl
Size: 29KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

093a51e0b7dcb2466b7edfd78d191aa0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 87KB - Virtual size: 86KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 76KB - Virtual size: 76KB

zydocyz Size: 31KB - Virtual size: 32KB

ieinset Size: 28KB - Virtual size: 28KB

xagvyvx Size: 59KB - Virtual size: 60KB

vnwypvr Size: 59KB - Virtual size: 60KB

vhcbaqh Size: 59KB - Virtual size: 60KB

dktfhkd Size: 59KB - Virtual size: 60KB

hmvwojo Size: 59KB - Virtual size: 60KB

pcelwtl Size: 29KB - Virtual size: 60KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 87KB - Virtual size: 86KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 76KB - Virtual size: 76KB

zydocyz
Size: 31KB - Virtual size: 32KB

ieinset
Size: 28KB - Virtual size: 28KB

xagvyvx
Size: 59KB - Virtual size: 60KB

vnwypvr
Size: 59KB - Virtual size: 60KB

vhcbaqh
Size: 59KB - Virtual size: 60KB

dktfhkd
Size: 59KB - Virtual size: 60KB

hmvwojo
Size: 59KB - Virtual size: 60KB

pcelwtl
Size: 29KB - Virtual size: 60KB