faa9705c05ec1b0aee0048105d3eefd5f2665bab599460d0bba7a0b2a9a6e13e

Sharing

Copy URL Twitter E-mail

General

Target

faa9705c05ec1b0aee0048105d3eefd5f2665bab599460d0bba7a0b2a9a6e13e
Size

77KB
MD5

68bebd1d147b2b08405734ad6094e75d
SHA1

8f0618440b8c089620ae9f8a073a1ded74504ebc
SHA256

faa9705c05ec1b0aee0048105d3eefd5f2665bab599460d0bba7a0b2a9a6e13e
SHA512

51481adc0f8cb214f2b411163573acad57e6e43fcada9a3dedbde153c39146813569ef4b3a996deab3f0ef73dabe2f4422f394e3cc2e6ca1bbe527e96e0ac77c
SSDEEP

1536:26fnMer22Cbu/Jq57PJ7/8xBQn4HJFdC4NPM7utESSe1vF238E+3xv6JKp3QmbHj:26vMeKbu/Jq57B7/sBKwFI4NU7utESSi

Score

N/A

Malware Config

Signatures

Files

faa9705c05ec1b0aee0048105d3eefd5f2665bab599460d0bba7a0b2a9a6e13e
.exe windows x86

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetVersionExA
GetStartupInfoA
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCommandLineA
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryW
lstrcatW
FindResourceW
GetProcAddress
LoadResource
LockResource
FreeResource
GetVersionExW
GetSystemDirectoryW
ExpandEnvironmentStringsW
lstrcmpW
GetModuleFileNameW
GetFullPathNameW
GetSystemDefaultLangID
HeapReAlloc
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
lstrlenW
lstrcmpiW
GetFileSize
ReadFile
FreeLibrary
GetWindowsDirectoryW
CreateFileW
SetFilePointer
LockFile
WriteFile
UnlockFile
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
Sleep

gdi32

GetStockObject
SelectObject
CreateFontIndirectW
GetDeviceCaps
DeleteDC
DeleteObject
BitBlt
GetTextExtentPoint32W
TextOutW
SetTextAlign
SetBkMode
GetObjectW
SetBkColor
LineDDA
SetPixel
SetTextColor
ExtTextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextMetricsW

user32

EndPaint
DrawEdge
GetSysColor
BeginPaint
PostMessageW
EnableWindow
GetDlgItem
PostQuitMessage
DestroyWindow
FrameRect
MessageBeep
FillRect
GetSysColorBrush
ScreenToClient
GetWindowRect
UnregisterClassW
GetClassInfoExW
SetFocus
SetWindowPos
GetKeyState
GetDlgItemTextW
EndDialog
DialogBoxParamW
SetWindowTextA
CreateWindowExA
SendMessageA
GetWindow
GetParent
GetWindowLongW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
BringWindowToTop
IsIconic
GetClassNameW
CreateWindowExW
RegisterClassExW
LoadCursorW
SetWindowLongW
ChildWindowFromPoint
SetWindowTextW
GetClientRect
ActivateKeyboardLayout
LoadMenuW
LoadImageW
LoadIconW
GetSystemMetrics
EnumWindows
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
LoadStringW
RedrawWindow
SetRect
ScrollWindow
UpdateWindow
GetDC
ReleaseDC
SetScrollInfo
wsprintfW
SendMessageW
ShowWindow
InvalidateRect

comdlg32

GetSaveFileNameW
GetOpenFileNameW

imm32

ImmAssociateContext
ImmGetContext
ImmNotifyIME
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmGetIMEFileNameW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TOT
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

imm32

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 2KB - Virtual size: 6KB

.rsrc Size: 8KB - Virtual size: 8KB

.TOT Size: 9KB - Virtual size: 9KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 2KB - Virtual size: 6KB

.rsrc
Size: 8KB - Virtual size: 8KB

.TOT
Size: 9KB - Virtual size: 9KB