dcf704fcae219a1162e2e6f0f4b85a9bf50bc47eef81531f07bc1b5250aa8c04

Sharing

Copy URL

Twitter E-mail

General

Target

dcf704fcae219a1162e2e6f0f4b85a9bf50bc47eef81531f07bc1b5250aa8c04
Size

300KB
MD5

64786b826ffab43dea61abe469edb41a
SHA1

317e532abdfeab4903a362bbdaafea433a45237a
SHA256

dcf704fcae219a1162e2e6f0f4b85a9bf50bc47eef81531f07bc1b5250aa8c04
SHA512

f9d9a4619dad8455296fb1d2d5de6217d4f00df9158de53f986b176cf8cf34a7cab01d427eba16d9552facdc76fd8e60f21926287798d20cef9b59a1ca3e5bb0
SSDEEP

6144:bz/73fNIb7r8FZ+k3r4NDcbVnMhnQWgQVwfuCKK8FTuKJ:bmr8FQ6r4xcZMhnQ83FTuKJ

Score

N/A

Malware Config

Signatures

Files

dcf704fcae219a1162e2e6f0f4b85a9bf50bc47eef81531f07bc1b5250aa8c04
.exe windows x86

0c28fb3b4bed78a2cad4d33eda2b01d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIconEx
CopyRect
MsgWaitForMultipleObjects
OpenWindowStationA
wsprintfA
IsWindowVisible
GetKeyboardLayoutNameA
CheckDlgButton
CharUpperW
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CheckRadioButton
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
LoadIconW
MapVirtualKeyExA
GetScrollPos

shell32

SHGetMalloc
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegEnumValueW
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW

gdi32

SetTextAlign
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
DeleteObject
GetDeviceCaps
SetBkColor
CreateBrushIndirect

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
WriteFile
ExitProcess
Sleep
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
LoadLibraryA
GetFileType
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
GetLastError
ClearCommBreak
GetUserDefaultUILanguage
GetTempFileNameA
SetFilePointerEx
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
ReadFile
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteCriticalSection
DefineDosDeviceA
MulDiv
lstrcatA
DeleteFileA
GlobalLock
GetOverlappedResult
EnumResourceNamesW
CreateSemaphoreW
LCMapStringW
LockResource
PeekNamedPipe

Sections

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aa
Size: 150KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c28fb3b4bed78a2cad4d33eda2b01d3

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

version

kernel32

Sections

.rdata Size: 24KB - Virtual size: 24KB

.aa Size: 150KB - Virtual size: 249KB

.rsrc Size: 124KB - Virtual size: 123KB

.rdata
Size: 24KB - Virtual size: 24KB

.aa
Size: 150KB - Virtual size: 249KB

.rsrc
Size: 124KB - Virtual size: 123KB