c2e0199f7894c0971ec3d5a104b74523f0d832b9faae3540cc3a6e56664aded4

Sharing

Copy URL Twitter E-mail

General

Target

c2e0199f7894c0971ec3d5a104b74523f0d832b9faae3540cc3a6e56664aded4
Size

159KB
MD5

7c151bfc3750fe8a85f812caf1c5d300
SHA1

5d694243fe9c718b7c3092f966533daebe5c5019
SHA256

c2e0199f7894c0971ec3d5a104b74523f0d832b9faae3540cc3a6e56664aded4
SHA512

ebe3bdf71ff28f8d15e4d2c95644f3bea856589b09690730e19e458d07016d662b37f1dee19cd19b1f959fed0a44ed179bfcab355de510cbf8f3a731d048b9e0
SSDEEP

3072:lJwjt8+VZ/Uyhm6WYaDNIoWmtx9tizoxSPEw4F5JjJBU8Uods8KTm5faFz:seWOx93xSanhJB/UodU

Score

N/A

Malware Config

Signatures

Files

c2e0199f7894c0971ec3d5a104b74523f0d832b9faae3540cc3a6e56664aded4
.exe windows x86

a4a5f05f34ff347d7602a46c34b04051

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
IntersectRect
GetDCEx
FindWindowA
GetCursorPos
EnumThreadWindows
DrawFrameControl
UpdateWindow
GetSystemMetrics
OffsetRect
GetKeyboardType
GetSysColor
GetLastActivePopup
LoadCursorA
SetFocus
LoadIconA
GetMenuState
SystemParametersInfoA
GetMessageA
WaitMessage
IsIconic
EnableMenuItem
GetKeyState
GetSysColorBrush
SetRect
RegisterWindowMessageA
GetIconInfo
DeleteMenu
GetDesktopWindow
IsDialogMessageA
IsZoomed
ReleaseDC
GetClassNameA

msvcrt

_exit
abort
_onexit
_except_handler3
memset
malloc
__p__commode
__getmainargs
atoi
__p___initenv
strrchr
__setusermatherr
_initterm
_adjust_fdiv
calloc
__p__fmode
_controlfp
__set_app_type
_vsnprintf
fprintf
_setmode
_XcptFilter
strcpy
__p__environ
fclose
__dllonexit
_errno
_strnicmp
fread

kernel32

GetConsoleMode
GetSystemTime
LocalFree
GetCurrentProcess
GetFileType
GetUserDefaultLangID
GetShortPathNameA
GetModuleHandleA
DeviceIoControl
SetUnhandledExceptionFilter
FormatMessageA
lstrcmpiW
CreateFileMappingA
GetTempPathA
GetCommandLineW
SetFileAttributesA
GetThreadLocale
FileTimeToSystemTime
GetWindowsDirectoryA
GlobalFree
GetOEMCP
VirtualProtect
CompareStringW
lstrlenW
GetModuleHandleW
OpenProcess

advapi32

RegFlushKey
RegCloseKey
RegCreateKeyExW
InitializeAcl
RegQueryValueExA
AddAccessAllowedAce
RegOpenKeyExW
CryptReleaseContext
CloseServiceHandle
ControlService
OpenServiceW
CopySid
IsValidSid
AdjustTokenPrivileges
SetSecurityDescriptorDacl
OpenServiceA
CheckTokenMembership
InitializeSecurityDescriptor
QueryServiceStatus
CryptDestroyHash

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a4a5f05f34ff347d7602a46c34b04051

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

advapi32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 77KB - Virtual size: 77KB

.data Size: 28KB - Virtual size: 28KB

.rsrc Size: 39KB - Virtual size: 192KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 77KB - Virtual size: 77KB

.data
Size: 28KB - Virtual size: 28KB

.rsrc
Size: 39KB - Virtual size: 192KB