ca4119ad8189082292428957bba08e77585932567e8d6a1f3f9f3a48fcbce956

Sharing

Copy URL Twitter E-mail

General

Target

ca4119ad8189082292428957bba08e77585932567e8d6a1f3f9f3a48fcbce956
Size

308KB
MD5

6c6568b83433cabff547fa0985aef590
SHA1

71ea41f1135d3cb235fad9c1f3ac7fe952f76aaf
SHA256

ca4119ad8189082292428957bba08e77585932567e8d6a1f3f9f3a48fcbce956
SHA512

efebecda08278b6aea696bf8940b9109242fb51f3988ed7868e31ae32b89c3946e57e669af2a64f1f4f770ca4c101dd1fd4b51571bc675a825442e49716cf575
SSDEEP

6144:9+k0PcHORoa+DfaIMQ0St2o50g4C5DvRLmd27Y:9f0YpSOQoug15BlY

Score

N/A

Malware Config

Signatures

Files

ca4119ad8189082292428957bba08e77585932567e8d6a1f3f9f3a48fcbce956
.exe windows x86

be2a9c5c4937d7dcde362fcc1af20706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_DragEnter
ImageList_GetIcon

shell32

ShellExecuteExW
Shell_NotifyIconA
ExtractIconA

gdi32

DPtoLP
RectVisible
GetTextExtentPoint32W
CreateCompatibleDC
SetWinMetaFileBits
SetViewportOrgEx
SetTextAlign
GetBkColor
SetMetaFileBitsEx
CreateDIBSection
SetBkColor
GetClipBox
CreateICA
GetWindowOrgEx
CreateICW
SetWindowExtEx

advapi32

InitializeSecurityDescriptor
CryptDestroyKey
RegEnumKeyW
GetSecurityInfo
RegCloseKey
CreateServiceA
SetThreadToken
RegNotifyChangeKeyValue
OpenSCManagerW
AccessCheck
GetSidSubAuthorityCount
ChangeServiceConfigW
LookupAccountSidW
LookupPrivilegeValueA

shlwapi

StrRetToStrW

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetFileTitleA

oleaut32

SysStringLen

kernel32

InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
VirtualAlloc
CopyFileA
GetLogicalDrives
GetModuleHandleA
DeviceIoControl
LocalFree
IsDebuggerPresent
GetModuleFileNameA
GetEnvironmentStringsW
SearchPathA
CreateToolhelp32Snapshot
MapViewOfFileEx
FileTimeToLocalFileTime
WritePrivateProfileStringW
FindFirstFileW
LCMapStringW
GetCPInfo
HeapSize
CreateDirectoryA
SetFileAttributesW
IsProcessorFeaturePresent
GetSystemWindowsDirectoryW
IsValidLocale
MoveFileExW
CompareFileTime
MapViewOfFile
GlobalMemoryStatus
WritePrivateProfileSectionA
OpenFile
GetEnvironmentVariableA
SetNamedPipeHandleState
LocalReAlloc
GetModuleFileNameW
_lclose
SystemTimeToFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateThread
GetProcAddress
Sleep
ReleaseMutex
OutputDebugStringW
GetThreadLocale
WideCharToMultiByte
GetSystemDefaultUILanguage
PulseEvent
GlobalAlloc
UnlockFile
GetVolumeInformationW
GetFileAttributesW
MoveFileExA
SetThreadPriority
CreateDirectoryW
GetConsoleMode
GetTimeFormatW
EnumResourceLanguagesW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA

ole32

OleIsRunning
ProgIDFromCLSID
CoSuspendClassObjects
OleTranslateAccelerator
CreateClassMoniker
OleRegEnumFormatEtc
StgCreateDocfileOnILockBytes
OleFlushClipboard
ReadClassStg
CoDisconnectObject
CoTaskMemFree
CreateStreamOnHGlobal

version

GetFileVersionInfoA

user32

GetParent
SetWindowPlacement
RemovePropA
EnableMenuItem
GetClientRect
InsertMenuA
TranslateMDISysAccel
KillTimer
GetWindowPlacement
DialogBoxIndirectParamA
DrawFrameControl
IsZoomed
UpdateWindow
SetClassLongW
OemToCharA
DdeUnaccessData
SetForegroundWindow

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be2a9c5c4937d7dcde362fcc1af20706

Headers

File Characteristics

Imports

comctl32

shell32

gdi32

advapi32

shlwapi

comdlg32

oleaut32

kernel32

ole32

version

user32

Sections

.text Size: 260KB - Virtual size: 257KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 752B

.text
Size: 260KB - Virtual size: 257KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 752B