f72c1375ac01a01de163f05f5ffd862a745abd0f0f12a9a407a32d014c88d419

Sharing

Copy URL Twitter E-mail

General

Target

f72c1375ac01a01de163f05f5ffd862a745abd0f0f12a9a407a32d014c88d419
Size

115KB
MD5

2ce7965ae9620fb97e3e381b9b11f7d0
SHA1

9bf64ae45312df1b884fc9356a18807b025182cc
SHA256

f72c1375ac01a01de163f05f5ffd862a745abd0f0f12a9a407a32d014c88d419
SHA512

9c23db2f4d4da405ee3850cfe92773dc9cc8488f991925af97fcf9d443e0114a5056633b2c5e37b674eda38047bbcdd8138b74372295e45fbca82a5aa0dd1267
SSDEEP

1536:oorZG4XWD6pGaT33mUN5yxGcZ3zk8TncXfHgl0kCLanKd9y3RImESV033RTt2:ooXXWeTKCyx14fAjmanKG3R8RTt2

Score

N/A

Malware Config

Signatures

Files

f72c1375ac01a01de163f05f5ffd862a745abd0f0f12a9a407a32d014c88d419
.exe windows x86

b30a622e882c97b8ee9064b2e9dc59b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

FlushFileBuffers
SetStdHandle
WriteConsoleW
MultiByteToWideChar
Sleep
SetFilePointer
RaiseException
HeapAlloc
IsProcessorFeaturePresent
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
LCMapStringW
GetStringTypeW
LoadLibraryW
HeapSize
HeapReAlloc
GetSystemTime
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetSystemTimeAsFileTime
GetLastError
GetStdHandle
ExitProcess
CloseHandle
HeapFree
GetCurrentThreadId
SetLastError
GetProcessHeap
GetModuleHandleW
CreateFileW
TlsFree
TlsSetValue
TlsGetValue
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc

user32

GetWindow
RegisterClassA
SetDlgItemTextA
LoadCursorA
DestroyMenu
EnableWindow
UpdateWindow
EndPaint
CloseClipboard
PostQuitMessage
DrawTextW
GetSubMenu
LoadMenuA
LoadIconA
GetClientRect
SendMessageA
BeginPaint
MessageBoxA
InvalidateRect
GetClipboardData
CreateWindowExA
GetDlgItem
DefWindowProcA
LoadAcceleratorsA
ShowWindow
SetMenu
IsDlgButtonChecked
OpenClipboard

gdi32

GetViewportOrgEx
FrameRgn
PatBlt
GetWindowExtEx
SetTextColor
DeleteDC
SetBkMode
SelectObject
CreateCompatibleDC
DPtoLP
SetMapMode
CreateFontW
CreateRectRgn
SetViewportExtEx
GetViewportExtEx
GetStockObject
CreateSolidBrush
TextOutA
GetWindowOrgEx

comdlg32

GetOpenFileNameA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

ws2_32

recv
send

avicap32

capCreateCaptureWindowA

winmm

waveOutGetNumDevs

shlwapi

StrChrA
StrToIntA

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b30a622e882c97b8ee9064b2e9dc59b0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

ws2_32

avicap32

winmm

shlwapi

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 10KB - Virtual size: 9KB