9602c5007b399612388454d7e263fd773a244ce34791b355be07f88ad265f540

Sharing

Copy URL Twitter E-mail

General

Target

9602c5007b399612388454d7e263fd773a244ce34791b355be07f88ad265f540
Size

197KB
MD5

61fde428febb8f24de26c81d61f253fe
SHA1

3b7330571a6996ba6119842778c8ce619c5fbf31
SHA256

9602c5007b399612388454d7e263fd773a244ce34791b355be07f88ad265f540
SHA512

79cab9e8e38b194af92364f09a56f8c735dc7040282ea170d9e510ab083ef60297ff35022d4b12d3bcb075c858051864aba9d0c3fa3ddb26f2f9617d12ce33b5
SSDEEP

3072:EOIZhCAMHvt0ttIEhE1wGoIW15n2gwNKSNV0mZath:GZcdDI6wGoIUIgHSNh

Score

N/A

Malware Config

Signatures

Files

9602c5007b399612388454d7e263fd773a244ce34791b355be07f88ad265f540
.exe windows x86

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrRStrIW

kernel32

GetPrivateProfileSectionW
lstrcatW
GetWindowsDirectoryW
MoveFileExW
GetModuleFileNameW
CloseHandle
CreateProcessW
CopyFileW
GetTempPathW
GetCurrentProcessId
DeleteFileW
SetFileAttributesW
GetFileAttributesW
WaitForSingleObject
OpenProcess
lstrcmpW
FreeLibrary
GetProcAddress
LoadLibraryExW
FindClose
GetLastError
FindNextFileW
FindFirstFileW
Process32NextW
lstrcmpiW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
HeapAlloc
Sleep
lstrlenW
RemoveDirectoryW
ReadFile
GetFileSize
CreateFileW
LoadLibraryW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateMutexW
lstrcpynW
GetCommandLineW
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetSystemTimeAsFileTime
lstrcpyW
WritePrivateProfileSectionW
WritePrivateProfileStringW
GetVersionExW
GetProcessHeap
HeapFree
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetCommandLineA
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW

user32

DialogBoxParamW
KillTimer
SetFocus
EndDialog
InvalidateRect
UpdateWindow
SetDlgItemTextW
GetDlgItem
EnableWindow
SystemParametersInfoW
GetWindowRect
MoveWindow
PostMessageW
SetTimer
FindWindowW
SendMessageW
wsprintfW
LoadStringW
MessageBoxW
ShowWindow

advapi32

RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey

shell32

SHChangeNotify
ShellExecuteExW

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

20a5f0934bbd5ee6523c6a12cb576131

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 120KB - Virtual size: 120KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 120KB - Virtual size: 120KB