aad0e1789112f7c4daca42257bb3603806292a9fa12b5f9b70167973dc8e4f9d

Sharing

Copy URL

Twitter E-mail

General

Target

aad0e1789112f7c4daca42257bb3603806292a9fa12b5f9b70167973dc8e4f9d
Size

70KB
MD5

79a0eef9a3cc9de07582f2aeb4d86bac
SHA1

a488c347163ec4be978779b132d2a78bad7c06af
SHA256

aad0e1789112f7c4daca42257bb3603806292a9fa12b5f9b70167973dc8e4f9d
SHA512

3f248e3054cbbe32879098ba059ff2d23509c0dd512cf7fbb148ea95bd5c520fe89e4eb97a3ff56118ccb82747a3eccd6b0d9b0eb4f876d2654847ad0d4f2f6d
SSDEEP

1536:76fnMer22Cbu/Jq57PJ7/8xBQn4HJFdC4NPM7utESSe1vF238E+3xv6JOp3QmbHw:76vMeKbu/Jq57B7/sBKwFI4NU7utESSt

Score

N/A

Malware Config

Signatures

Files

aad0e1789112f7c4daca42257bb3603806292a9fa12b5f9b70167973dc8e4f9d
.exe windows x86

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetVersionExA
GetStartupInfoA
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCommandLineA
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryW
lstrcatW
FindResourceW
GetProcAddress
LoadResource
LockResource
FreeResource
GetVersionExW
GetSystemDirectoryW
ExpandEnvironmentStringsW
lstrcmpW
GetModuleFileNameW
GetFullPathNameW
GetSystemDefaultLangID
HeapReAlloc
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
lstrlenW
lstrcmpiW
GetFileSize
ReadFile
FreeLibrary
GetWindowsDirectoryW
CreateFileW
SetFilePointer
LockFile
WriteFile
UnlockFile
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
Sleep

gdi32

GetStockObject
SelectObject
CreateFontIndirectW
GetDeviceCaps
DeleteDC
DeleteObject
BitBlt
GetTextExtentPoint32W
TextOutW
SetTextAlign
SetBkMode
GetObjectW
SetBkColor
LineDDA
SetPixel
SetTextColor
ExtTextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextMetricsW

user32

EndPaint
DrawEdge
GetSysColor
BeginPaint
PostMessageW
EnableWindow
GetDlgItem
PostQuitMessage
DestroyWindow
FrameRect
MessageBeep
FillRect
GetSysColorBrush
ScreenToClient
GetWindowRect
UnregisterClassW
GetClassInfoExW
SetFocus
SetWindowPos
GetKeyState
GetDlgItemTextW
EndDialog
DialogBoxParamW
SetWindowTextA
CreateWindowExA
SendMessageA
GetWindow
GetParent
GetWindowLongW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
BringWindowToTop
IsIconic
GetClassNameW
CreateWindowExW
RegisterClassExW
LoadCursorW
SetWindowLongW
ChildWindowFromPoint
SetWindowTextW
GetClientRect
ActivateKeyboardLayout
LoadMenuW
LoadImageW
LoadIconW
GetSystemMetrics
EnumWindows
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
LoadStringW
RedrawWindow
SetRect
ScrollWindow
UpdateWindow
GetDC
ReleaseDC
SetScrollInfo
wsprintfW
SendMessageW
ShowWindow
InvalidateRect

comdlg32

GetSaveFileNameW
GetOpenFileNameW

imm32

ImmAssociateContext
ImmGetContext
ImmNotifyIME
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmGetIMEFileNameW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

imm32

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 2KB - Virtual size: 6KB

.rsrc Size: 8KB - Virtual size: 8KB

XOR Size: 2KB - Virtual size: 2KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 2KB - Virtual size: 6KB

.rsrc
Size: 8KB - Virtual size: 8KB

XOR
Size: 2KB - Virtual size: 2KB