79f2501d0b6a9af61826fcc6f8413fd0cffbdd7a27b2d8062867de96df07577a

Sharing

Copy URL Twitter E-mail

General

Target

79f2501d0b6a9af61826fcc6f8413fd0cffbdd7a27b2d8062867de96df07577a
Size

252KB
MD5

64f75a26706d790efc3310465e906790
SHA1

f263f121cceadde5f4184f43fcf3d0597eca2b98
SHA256

79f2501d0b6a9af61826fcc6f8413fd0cffbdd7a27b2d8062867de96df07577a
SHA512

6b872dc5803268dd9d1d849e3632ce93473e37de0771c42747df70548de8dff4be7bdb808ed3f490febeeb50a9aa854a20c523f8c1e261afdc6825ee7ea9a6e1
SSDEEP

6144:hId079u0236C/DkLqMAo74a3l/wOjjf0jF1zLYpH/XRe:eEALkuMAojYO30jFOpH/

Score

N/A

Malware Config

Signatures

Files

79f2501d0b6a9af61826fcc6f8413fd0cffbdd7a27b2d8062867de96df07577a
.exe windows x86

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
lstrcpynA
lstrlenA
GetLastError
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
FreeLibrary
MultiByteToWideChar
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalFree
GetTickCount
GetModuleFileNameW
GetVersionExW
LocalAlloc
LoadLibraryW
GetLocalTime
GetProcAddress
LoadLibraryA

user32

EnableWindow
SetForegroundWindow
SendMessageW
GetMenuState
ShowCaret
CreateAcceleratorTableW
SetTimer
GetMenuItemID
GetMenuInfo
PostMessageW
GetCapture
CreateDesktopA
GetSubMenu
wsprintfA
CreateDialogIndirectParamW
LoadMenuW
AppendMenuA
CharPrevA
SetWindowTextW
SetDlgItemInt
TrackPopupMenuEx
GetForegroundWindow
GetSysColor
TrackPopupMenu
IsWindow
LoadIconA
wsprintfW
GetDlgItemTextA
GetMessageW
DialogBoxParamA
AdjustWindowRect
GetCursorPos
CopyIcon
MonitorFromPoint
CreateDialogParamA
GetKeyState
SetCursor
CharNextA
SetDlgItemTextW
GetDCEx

advapi32

RegCreateKeyExW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA

shell32

SHGetDesktopFolder

security

SealMessage
CompleteAuthToken

gdi32

CreatePolygonRgn
CreateScalableFontResourceW
StretchDIBits
GetTextExtentPointA
SelectBrushLocal
CreateFontIndirectExA
AddFontResourceW

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xSHu
Size: 2KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xCaD
Size: 104KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.G
Size: 4KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oBZ
Size: 5KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Pi
Size: 105KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e4ffada0d4bb5946be829009347cc79

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

security

gdi32

Sections

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 41KB

.xSHu Size: 2KB - Virtual size: 476KB

.xCaD Size: 104KB - Virtual size: 172KB

.G Size: 4KB - Virtual size: 125KB

.oBZ Size: 5KB - Virtual size: 464KB

.data Size: 6KB - Virtual size: 379KB

.Pi Size: 105KB - Virtual size: 166KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 41KB

.xSHu
Size: 2KB - Virtual size: 476KB

.xCaD
Size: 104KB - Virtual size: 172KB

.G
Size: 4KB - Virtual size: 125KB

.oBZ
Size: 5KB - Virtual size: 464KB

.data
Size: 6KB - Virtual size: 379KB

.Pi
Size: 105KB - Virtual size: 166KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 1KB - Virtual size: 4KB