0e414017413eb9e1cb3bb2e2d6b2e8438262339230e6595169f8222271163394

Sharing

Copy URL Twitter E-mail

General

Target

0e414017413eb9e1cb3bb2e2d6b2e8438262339230e6595169f8222271163394
Size

196KB
MD5

6e320bbadf28cc7252e74ddbb2e43d72
SHA1

2d7c560667810bafd5aba09d4db3e67fa4031aed
SHA256

0e414017413eb9e1cb3bb2e2d6b2e8438262339230e6595169f8222271163394
SHA512

ff82b97ae9cd4e2f190747040f046e4f24553d671fe6ae3081bf8097c7d161bb34d5e08165962c25430415e5aeab8f4ca788d17714b50f589a2095747debf523
SSDEEP

6144:+k367Hqt2jycgL+rhHKKV2BsdZhgTj8N9Bl:NiHKp+lrmsbhgTj8Fl

Score

N/A

Malware Config

Signatures

Files

0e414017413eb9e1cb3bb2e2d6b2e8438262339230e6595169f8222271163394
.exe windows x86

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextW
wsprintfW
LoadIconW
DialogBoxParamW
ReleaseDC
SendDlgItemMessageW
SetCursor
MessageBoxW
EndDialog
LoadStringW
SetWindowLongW
GetDlgItemTextA
RegisterClipboardFormatW
GetParent
LoadCursorW
PostMessageW
SetFocus
GetWindowLongW
InsertMenuItemW
SystemParametersInfoW
WinHelpW
LoadBitmapW
EnableWindow
GetDlgItem
LoadImageW
GetDC
SendMessageW
SetWindowTextW

kernel32

WideCharToMultiByte
DeleteCriticalSection
IsValidCodePage
lstrcmpiW
OutputDebugStringW
GetStartupInfoA
GlobalUnlock
GetComputerNameW
LocalReAlloc
GetCPInfo
LoadLibraryW
CloseHandle
DeleteFileA
LocalFree
CreateFileW
GetCurrentProcess
InterlockedDecrement
GetEnvironmentStringsA
lstrlenW
SetUnhandledExceptionFilter
GetProcAddress
InitializeCriticalSection
GlobalLock
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
GlobalAlloc
IsBadReadPtr
GetTickCount
FileTimeToSystemTime
FormatMessageW
lstrcpyW
GetDateFormatW
OutputDebugStringA
GetModuleHandleA
GetSystemWindowsDirectoryW
QueryPerformanceCounter
FileTimeToLocalFileTime
SetLastError
InterlockedIncrement
GetLastError
GlobalFree

certcli

CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeFlags
CACloseCA
CACreateCertType
CAGetCertTypeFlags
CAGetCAProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAFreeCAProperty
CACloseCertType
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAAddCACertificateType
CASetCertTypeExtension
CAEnumCertTypes
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA

msvcrt

_adjust_fdiv
_wcsicmp
_purecall
wcsstr
vswprintf
wcstoul
_initterm
malloc
??1type_info@@UAE@XZ
wcschr
memmove
wcscpy
wcslen
__dllonexit
?terminate@@YAXXZ
_wcsupr
_onexit
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscat
free
mbstowcs
_except_handler3
??2@YAPAXI@Z
wcscmp

shell32

ShellExecuteW
ShellExecuteExW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 78KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

Imports

user32

kernel32

certcli

msvcrt

shell32

advapi32

gdi32

comctl32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 45KB - Virtual size: 44KB

.hdata Size: 78KB - Virtual size: 3.2MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 45KB - Virtual size: 44KB

.hdata
Size: 78KB - Virtual size: 3.2MB

.rsrc
Size: 3KB - Virtual size: 2KB