77b334469680acdc4232e5fb05b6bdb692dcf796285eca1f5f8f5f58af114158

Sharing

Copy URL Twitter E-mail

General

Target

77b334469680acdc4232e5fb05b6bdb692dcf796285eca1f5f8f5f58af114158
Size

160KB
MD5

6e23d512c98b1e06951f3e411dbc744f
SHA1

9ff937efe678b7b7add9702d77393a2ead420920
SHA256

77b334469680acdc4232e5fb05b6bdb692dcf796285eca1f5f8f5f58af114158
SHA512

98756969182ffb17540f9d042b9adf8ea767ffb27b7387ed96a504c947240cb9991a114931b51f0e4a6d09baf90b3e509b89c72834bf4be104fb3e29a56b3bba
SSDEEP

3072:0u4ZtPOwRK1GSciTvCV+Qzz3zStWdu6bbX6rp6DOa86++rp6HBvw4+wNp9xJ:yzK1GSPK+Qf3+tS7nX6rpebUBvw4PpN

Score

N/A

Malware Config

Signatures

Files

77b334469680acdc4232e5fb05b6bdb692dcf796285eca1f5f8f5f58af114158
.exe windows x86

b8b5f6ff2d3393ece15f2ea8b33ea206

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA
FindTextW
GetSaveFileNameA
PrintDlgW
CommDlgExtendedError

rpcrt4

NDRcopy
MesHandleFree
I_RpcTransIoCancelled
MesBufferHandleReset

user32

CloseDesktop
SendNotifyMessageW
IsCharUpperA
MessageBoxExW
CharUpperBuffA
PostMessageA
SetDlgItemTextW
SetFocus
ValidateRect
PostQuitMessage
GetShellWindow
IsCharAlphaW
CharUpperBuffW
DestroyWindow
MoveWindow
GetKeyNameTextW
DestroyCursor
ShowOwnedPopups
ShowWindowAsync
SetCursorPos
IsWindowVisible
AdjustWindowRectEx
SendMessageW
SetDlgItemInt
DefDlgProcA
OffsetRect
FindWindowA
GetDlgItemTextW
ToUnicodeEx
TranslateAcceleratorA
GetDlgItem
GetDC
GetWindowPlacement
CreateWindowExW
EnableMenuItem
GetScrollPos
GetClipCursor
IsWindowEnabled
IsDlgButtonChecked
RegisterWindowMessageW
LookupIconIdFromDirectory
GetWindow
CreateDialogIndirectParamW
LoadImageW
GetWindowTextW
OemToCharBuffA
SetWindowTextA
GetDCEx
MonitorFromRect
EnumWindows
KillTimer
PeekMessageA
ActivateKeyboardLayout
ArrangeIconicWindows
InvalidateRect
ClientToScreen
InsertMenuItemW
CopyImage
SendMessageA
DialogBoxIndirectParamA
DialogBoxParamA
GetMenuItemRect
UpdateWindow
FindWindowW
GetFocus
DialogBoxIndirectParamW
WaitForInputIdle
GetWindowRect
FindWindowExA
CharLowerW
GetClassInfoW
GetKeyboardType
DragObject
DrawStateW
RegisterClassA
GetForegroundWindow
DrawTextA
AllowSetForegroundWindow
SendDlgItemMessageA
WindowFromPoint
SetLastErrorEx
CharPrevW
MapVirtualKeyW
ShowWindow
IsDialogMessageW
IsIconic
HiliteMenuItem
GetMonitorInfoW
OpenInputDesktop
CharLowerBuffW
OpenIcon
RegisterWindowMessageA
GetClassLongW
SetTimer
SetForegroundWindow
GetWindowLongA
TrackPopupMenu
GetSysColorBrush

kernel32

GetComputerNameA
GetSystemTimeAsFileTime
IsBadReadPtr
CancelWaitableTimer
GetAtomNameW
InitializeCriticalSection
GetDateFormatA
GetStdHandle
GetStringTypeExW
LoadResource
MultiByteToWideChar
WaitForSingleObjectEx
TlsFree
LocalUnlock
HeapFree
OpenEventA
GetSystemTime
GetNumberFormatA
lstrcatA
CreateFileMappingA
SetThreadLocale
VerSetConditionMask
ClearCommBreak
GetFullPathNameA
FindCloseChangeNotification
WriteFile
FreeLibrary
SetSystemTimeAdjustment
GetTickCount
GetLongPathNameW
lstrcmpiW
GetProcAddress
SetThreadContext
DeviceIoControl
GetExitCodeThread
GetModuleHandleW
GetTimeFormatA
SetNamedPipeHandleState
CreateDirectoryA
GetUserDefaultUILanguage
CreateThread
GetStartupInfoW
TerminateThread
GetVersionExA
FileTimeToLocalFileTime
GetComputerNameW
LocalLock
MulDiv
GetBinaryTypeA
VirtualProtect
SetThreadExecutionState
LocalAlloc
GetWindowsDirectoryA
EnumResourceLanguagesA
GetTimeFormatW
GetTimeZoneInformation
CreateEventA
GetThreadPriority
UnmapViewOfFile
GetSystemDefaultUILanguage
GlobalFlags
GlobalHandle
SetErrorMode
GlobalFindAtomW
GlobalCompact
lstrlenA
GetOverlappedResult
QueryDosDeviceW
SizeofResource
SetCommBreak
FindResourceW
GetUserDefaultLCID
LoadLibraryExW
GetCommModemStatus
SetThreadAffinityMask
GlobalMemoryStatusEx
GetComputerNameExA
RaiseException
SetFilePointer
FreeResource
CreateMutexW
SearchPathA
SetCurrentDirectoryW
HeapUnlock
EnumResourceNamesW
GetModuleFileNameW
IsValidLocale
MoveFileW
CompareStringA
LCMapStringW
CreateSemaphoreA
SleepEx
GlobalGetAtomNameW
WinExec
ClearCommError
CreateEventW
GlobalReAlloc

gdi32

ScaleWindowExtEx
GetTextExtentPointW
CreateCompatibleDC
GetDIBColorTable
CreatePatternBrush
CreateICW
GetMapMode
EnumFontFamiliesExW
SetMapMode
SetBkMode
UnrealizeObject
CreateRoundRectRgn
SetDIBitsToDevice
StartDocW
GetRgnBox
OffsetViewportOrgEx
CreateHatchBrush
GetBitmapBits
SetWindowExtEx
CreateDCW
SelectPalette
SetBkColor
RealizePalette
GetCurrentObject
CreateEllipticRgnIndirect
SetROP2
GetTextExtentPoint32A
GetWindowOrgEx
StretchDIBits
GetSystemPaletteUse
EndPath
EndPage
SetStretchBltMode
BitBlt
GetClipBox
GetTextMetricsA
RemoveFontResourceW
CreateDIBSection
SetBitmapDimensionEx
PolyBezier
DeleteObject

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mon887
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Much
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oypac
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Coni
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8b5f6ff2d3393ece15f2ea8b33ea206

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

rpcrt4

user32

kernel32

gdi32

Sections

.text Size: 21KB - Virtual size: 21KB

.Agio Size: 9KB - Virtual size: 8KB

.mon887 Size: 512B - Virtual size: 4KB

.Much Size: 512B - Virtual size: 32B

.oypac Size: 512B - Virtual size: 384B

.Coni Size: 120KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 21KB - Virtual size: 21KB

.Agio
Size: 9KB - Virtual size: 8KB

.mon887
Size: 512B - Virtual size: 4KB

.Much
Size: 512B - Virtual size: 32B

.oypac
Size: 512B - Virtual size: 384B

.Coni
Size: 120KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 3KB - Virtual size: 2KB