6a1cc925a5453f1f06c56cb95a17f0790e2022ad30f8a801d1815cc66df13fe8

Sharing

Copy URL

Twitter E-mail

General

Target

6a1cc925a5453f1f06c56cb95a17f0790e2022ad30f8a801d1815cc66df13fe8
Size

1.8MB
MD5

7777d846a14dd3917e776d35bfab17d8
SHA1

4169fdd1d597824a3acee16784a843225d1664f7
SHA256

6a1cc925a5453f1f06c56cb95a17f0790e2022ad30f8a801d1815cc66df13fe8
SHA512

4f6ce09ac94d3ee1b86579b33da2f478a336ca48f2932cfc8cadc1c650415efebc0a7e2ecd7e6777ff7734eaecd726faf8a9b7af6e78b1f666744d7102d0b97d
SSDEEP

24576:JtqxBVB1RrD/u9AmK62I8VFp7kD+DGb7ahrf1EQ1HVB8cJ/wSHH6V9Jl:JQxBVB1RrcFKVI8u+DGb7SrfSoVBO/L

Score

N/A

Malware Config

Signatures

Files

6a1cc925a5453f1f06c56cb95a17f0790e2022ad30f8a801d1815cc66df13fe8
.exe windows x86

b5c1986878f1998ae79c70aec9306111

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

imm32

ImmInstallIMEW

kernel32

GetFileAttributesW
CreateDirectoryW
LocalFree
WaitForSingleObject
CloseHandle
Sleep
GetTickCount
CreateMutexW
ReleaseMutex
WriteFile
CopyFileW
WideCharToMultiByte
UnmapViewOfFile
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
LockFile
UnlockFile
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
DuplicateHandle
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
DeleteFileW
GetWindowsDirectoryW
GetFileAttributesExW
CreateFileW
GetDriveTypeW
GetSystemDirectoryW
GetVersionExW
FindNextFileW
MapViewOfFile
CreateFileMappingW
SetFileAttributesW
SetFileTime
LoadLibraryW
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
MultiByteToWideChar
SetHandleCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
ExitProcess
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCommandLineW
CreateThread
ExitThread
FreeLibrary
EncodePointer
MulDiv
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
lstrlenW
lstrcpyW
GetCurrentProcess
FlushInstructionCache
GetModuleHandleW
GetProcAddress
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetEnvironmentStringsW
DecodePointer
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
SetStdHandle
GetConsoleMode
GetConsoleCP
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
LoadLibraryExW
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetFileType
InterlockedCompareExchange

user32

UnregisterClassA
RegisterWindowMessageW
CallWindowProcW
GetWindowRect
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
FindWindowExW
FindWindowW
UnloadKeyboardLayout
GetActiveWindow
CharUpperW
EnableWindow
KillTimer
SetTimer
GetWindowTextLengthW
GetWindowTextW
MessageBeep
SetFocus
SetDlgItemTextW
MessageBoxW
GetWindow
GetWindowLongW
GetDlgItem
GetParent
SetWindowTextW
PostMessageW
DestroyWindow
ReleaseDC
GetDC
CharNextW
DefWindowProcW
SendMessageW
SetWindowLongW
MonitorFromWindow

gdi32

GetDeviceCaps
GetObjectW
CreateFontIndirectW
DeleteObject

comdlg32

GetFileTitleW

advapi32

FreeSid
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
GetUserNameW
RegCreateKeyW
GetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
ord680

ole32

CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarUI4FromStr

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW

comctl32

DestroyPropertySheetPage
PropertySheetW
CreatePropertySheetPageW
InitCommonControlsEx

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.0MB - Virtual size: 19.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5c1986878f1998ae79c70aec9306111

Headers

DLL Characteristics

File Characteristics

Imports

version

imm32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 14KB - Virtual size: 22KB

.rsrc Size: 19.0MB - Virtual size: 19.0MB

.reloc Size: 61KB - Virtual size: 61KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 14KB - Virtual size: 22KB

.rsrc
Size: 19.0MB - Virtual size: 19.0MB

.reloc
Size: 61KB - Virtual size: 61KB