fd149ee37162b246610560f6f33995ef2eb9c5e178400a547306c4fe7835c681

Sharing

Copy URL Twitter E-mail

General

Target

fd149ee37162b246610560f6f33995ef2eb9c5e178400a547306c4fe7835c681
Size

392KB
MD5

6b3597eb2dfd939567e265874b0084d0
SHA1

51ae601f3378988d1a72ca5668daba0bd2434852
SHA256

fd149ee37162b246610560f6f33995ef2eb9c5e178400a547306c4fe7835c681
SHA512

6e887ee56ecca64c122881d1779583686f453e044b92200c9079ad36d6d0515cb3fe40973a232b2b65d7a60ec0343beda7c80222b7fa03ff976136b41981f4c6
SSDEEP

6144:19G6/ElB0HjXRidEF6dNqhLIN1vGs2ItRY5wALXqo1jmUZxL6xQGQW8w:vD/ElB2A9MG1b7tu3LXqs76l5

Score

N/A

Malware Config

Signatures

Files

fd149ee37162b246610560f6f33995ef2eb9c5e178400a547306c4fe7835c681
.exe windows x86

e43307f0dacab0ce3f747127e39d9463

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx
ord17
ImageList_DrawEx
_TrackMouseEvent
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord6

kernel32

FindClose
FormatMessageA
GetFileAttributesA
LocalFree
FindFirstFileA
MoveFileA
CreateEventA
CreateFileA
CloseHandle
IsBadReadPtr
GetCurrentThreadId
GetTickCount
OutputDebugStringA
LoadLibraryExA
lstrcpyA
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcAddress
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
WideCharToMultiByte
GetACP
MultiByteToWideChar
InterlockedDecrement
GetLocaleInfoA
FreeLibrary
LoadLibraryA
lstrlenA
lstrcatA
FindResourceA
LoadResource
LockResource
FreeResource
FindNextFileA
DeleteFileA
lstrcmpiA
Sleep
GetStringTypeA
GetFileType
GetStdHandle
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
SetLastError
TlsGetValue
TlsSetValue
LCMapStringW
TlsAlloc
GetOEMCP
GetCPInfo
LCMapStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadWritePtr
DeleteCriticalSection
VirtualFree
HeapCreate
VirtualAlloc
GetVersionExA
GetEnvironmentVariableA
HeapDestroy
ExitProcess
GetCommandLineA
HeapReAlloc
GetModuleHandleA
RtlUnwind
GetStartupInfoA
HeapSize
GetStringTypeW
HeapAlloc
VirtualQuery
HeapFree
WaitForSingleObject
GetVersion
IsBadCodePtr
SetUnhandledExceptionFilter
SetFilePointer
SetStdHandle
FlushFileBuffers

user32

GetClassInfoA
SetPropA
IsWindowEnabled
RemovePropA
GetWindowRect
GetSysColor
PostMessageA
GetUpdateRect
GetDC
SetRect
FillRect
ReleaseDC
wsprintfA
EnableWindow
IsWindow
SetWindowPos
DialogBoxParamA
IsWindowVisible
MessageBeep
GetFocus
GetCapture
SetCapture
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
GetParent
GetDlgItem
BeginPaint
EndPaint
LoadStringA
DestroyWindow
GetClientRect
CreateWindowExA
SetWindowLongA
InvalidateRect
KillTimer
SetTimer
GetCursorPos
WindowFromPoint
CallWindowProcA
SetWindowTextA
ValidateRgn
IsDialogMessageA
PeekMessageA
WinHelpA
GetWindow
GetClassNameA
DrawTextExA
ReleaseCapture
ShowWindow
GetWindowDC
LoadImageA
InsertMenuItemA
SetCursorPos
TrackPopupMenuEx
SetWindowsHookExA
GetAsyncKeyState
UnhookWindowsHookEx
CallNextHookEx
TranslateAcceleratorA
IsMenu
GetWindowTextA
SetCursor
PostQuitMessage
UpdateWindow
GetDesktopWindow
IsIconic
SetForegroundWindow
SystemParametersInfoA
LoadAcceleratorsA
SetParent
SetRectEmpty
LoadBitmapA
GetSystemMetrics
LoadMenuA
DrawTextA
GetMenuItemCount
SetMenuItemInfoA
GetSubMenu
GetMenuItemInfoA
ClientToScreen
TrackPopupMenu
DestroyMenu
DispatchMessageA
GetMessageA
TranslateMessage
DefWindowProcA
DefDlgProcA
RegisterClassExA
GetClassInfoExA
LoadCursorA
SetFocus
RegisterClassA
GetWindowLongA
FindWindowExA
DrawEdge
ScreenToClient
SendMessageA
GetPropA
GetDlgItemTextA
DestroyAcceleratorTable
InflateRect

gdi32

DeleteObject
SelectObject
CreateCompatibleDC
GetStockObject
RealizePalette
SelectPalette
CreateDIBitmap
CreatePalette
BitBlt
CreateCompatibleBitmap
LineTo
MoveToEx
CreatePen
GetDeviceCaps
SetBkMode
SetTextColor
SetBkColor
CreateSolidBrush
CreateDIBPatternBrushPt
StretchBlt
CreateFontIndirectA
CreateFontA
UpdateColors
GetTextExtentPoint32A
FillRgn
CreatePolygonRgn
TextOutA
CreateBitmapIndirect
GetNearestColor
ExcludeClipRect
SelectClipRgn
CreateRectRgn
DeleteDC
GetObjectA

shell32

ShellExecuteA

ole32

CoTaskMemFree
CoUninitialize
OleUninitialize
OleInitialize
CoInitialize
CoTaskMemAlloc

oleaut32

SysStringLen
SysAllocString
SysReAllocStringLen
SysAllocStringByteLen
SysFreeString
SysStringByteLen

mxdlgsup

MXMessageBox
MXSubclassDialog
MXLoadLanguageDll

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e43307f0dacab0ce3f747127e39d9463

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

shell32

ole32

oleaut32

mxdlgsup

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 22KB

.rsrc Size: 28KB - Virtual size: 27KB

.tc Size: 200KB - Virtual size: 200KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 22KB

.rsrc
Size: 28KB - Virtual size: 27KB

.tc
Size: 200KB - Virtual size: 200KB