9fcb30bc3d25ce15fd669db32149654881384096f4385aa46cddc1896c8cd19f

Sharing

Copy URL Twitter E-mail

General

Target

9fcb30bc3d25ce15fd669db32149654881384096f4385aa46cddc1896c8cd19f
Size

342KB
MD5

6294089033b60a17cf22497ea1f2f820
SHA1

866d3622db7b9c80154f8cad5953d916e89a19ca
SHA256

9fcb30bc3d25ce15fd669db32149654881384096f4385aa46cddc1896c8cd19f
SHA512

88472511f80fb22a406150e4fdb4b399f42c8817cff11cd3a03d15a05797b9ed5d6319645e739077bba77e8d5c8a32f050a052e32360365ced7f405b7efba330
SSDEEP

6144:ED4Ht+YZ4cjagiaFaBvpWKncbQHz6zh8Mc6mLptJnDxj:EDM+S4cjtiaFwvEQHz6zhVc1LptNV

Score

N/A

Malware Config

Signatures

Files

9fcb30bc3d25ce15fd669db32149654881384096f4385aa46cddc1896c8cd19f
.exe windows x86

1bd13e990bee73f18887d08a5fed6404

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollBarInfo
MessageBoxA
LoadKeyboardLayoutA
OpenClipboard
GetWindowLongW
MoveWindow
DeleteMenu
MessageBoxW
CreateMenu
SetRect
wsprintfW
TrackPopupMenu
GetCursorPos
GetMenuItemID
GetKeyState
KillTimer
GetMenuDefaultItem
EmptyClipboard
GetCapture
DefDlgProcW
FrameRect
WindowFromDC
CopyIcon
GetQueueStatus
RegisterShellHookWindow
IsWindowVisible
GetProcessWindowStation
GetWindowRgnBox
IsGUIThread

shell32

SHGetMalloc
ShellExecuteW

ole32

CreateILockBytesOnHGlobal

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA

gdi32

CreateSolidBrush
CreateFontIndirectW
TextOutA
FillRgn
CreateRectRgn
SetDCBrushColor
SetPaletteEntries
SetICMProfileA
GetTextFaceA
GetViewportExtEx
GetBoundsRect
SetPixelV
DeleteMetaFile
GetRasterizerCaps
GetTextColor
GetCharWidth32W
TranslateCharsetInfo
SetGraphicsMode
GetCharABCWidthsW
AbortPath
TextOutW
GetBitmapDimensionEx
CreateBrushIndirect

crypt32

CryptMsgGetParam

kernel32

TlsFree
TlsSetValue
GetFileType
InterlockedIncrement
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
TlsAlloc
FileTimeToLocalFileTime
SetProcessPriorityBoost
TlsGetValue
InitAtomTable
GetThreadPriority
SetStdHandle
GetProcessWorkingSetSize
GlobalReAlloc
GetVersionExA
EndUpdateResourceW
WideCharToMultiByte
TerminateThread
GetTickCount
GetSystemTimeAsFileTime
GetPrivateProfileStringW
LoadLibraryA
VirtualFree
FindNextFileW
LocalFree
GetLocaleInfoA
GetCurrentProcessId
VirtualProtect
GetCurrentThread
LoadResource
GetProcAddress
HeapAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bd13e990bee73f18887d08a5fed6404

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

crypt32

kernel32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 13KB - Virtual size: 164KB

.rsrc Size: 259KB - Virtual size: 259KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 13KB - Virtual size: 164KB

.rsrc
Size: 259KB - Virtual size: 259KB