69ecf8e5c53e5cb81f0407055967396f91b05e134671ce2224299a8d2f19609f

Sharing

Copy URL

Twitter E-mail

General

Target

69ecf8e5c53e5cb81f0407055967396f91b05e134671ce2224299a8d2f19609f
Size

116KB
MD5

6def88c81c0ae6a0df54350a33906518
SHA1

7ac083141721eb32fd327bd9d2b6564b8387dacc
SHA256

69ecf8e5c53e5cb81f0407055967396f91b05e134671ce2224299a8d2f19609f
SHA512

d671857b033b44afa8d6a277c3b5fac2fcf4728ba60edd433fad99fa5c26e696caa9e9ff9c0805978ad82249cb862a196801565497a3c981762958ebc9c75561
SSDEEP

3072:bBHRDHdWd8NMez4NuUvuL4WXbL/JVgJ2YQsH7K:tdHqLJ6tbzk2Y

Score

N/A

Malware Config

Signatures

Files

69ecf8e5c53e5cb81f0407055967396f91b05e134671ce2224299a8d2f19609f
.dll windows x86

4a0e95ba16745cb0becad052474ccda5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteA

dinput

DirectInputCreateW

user32

GetForegroundWindow
EnumPropsA
GetCaretPos
GetKeyState
BeginDeferWindowPos
CharLowerBuffA
CharLowerW
CharToOemA
CreateWindowExA
DefWindowProcA
DialogBoxParamA
DispatchMessageA
UpdateWindow
TranslateMessage
ShowWindow
SetUserObjectSecurity
SetSystemCursor
SetRect
RemoveMenu
RegisterWindowMessageW
RegisterShellHookWindow
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
EmptyClipboard

ole32

PropVariantClear
IsEqualGUID

ws2_32

connect
closesocket
WSCDeinstallProvider
WSAUnhookBlockingHook
WSAGetLastError
htons
socket
gethostbyname

advapi32

SetSecurityDescriptorDacl
SetUserFileEncryptionKey
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetTrusteeNameW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
FileEncryptionStatusA
BuildExplicitAccessWithNameW
AddAccessDeniedAce

kernel32

GetWindowsDirectoryA
GetVersionExA
GetTimeZoneInformation
GetTempPathW
GetSystemInfo
GetSystemDefaultLangID
GetStringTypeExA
GetPrivateProfileSectionW
GetModuleHandleA
GetFileAttributesExA
GetCurrentProcessId
GetConsoleOutputCP
GetConsoleAliasA
HeapCreate
GetBinaryTypeA
FormatMessageA
FlushConsoleInputBuffer
FindNextVolumeW
GlobalAddAtomA
FindAtomA
ExitProcess
EnumTimeFormatsA
DuplicateHandle
DeleteCriticalSection
CreateSemaphoreA
CloseHandle
BindIoCompletionCallback
Beep
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
SetFileTime
TlsGetValue
WaitForMultipleObjectsEx
lstrcmpA
FindAtomW
HeapAlloc
GetCommandLineA

winmm

mmioInstallIOProcA
waveOutUnprepareHeader
waveOutRestart
waveInStart
waveInGetDevCapsA
timeKillEvent
timeBeginPeriod
mod32Message
PlaySoundW
WOW32DriverCallback
midiInStart
midiOutSetVolume

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a0e95ba16745cb0becad052474ccda5

Headers

File Characteristics

Imports

shell32

dinput

user32

ole32

ws2_32

advapi32

kernel32

winmm

version

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB