d902179229da64281d22ab88d1345641bce607516fc3a31077676f5fbfe3ffcf

Sharing

Copy URL Twitter E-mail

General

Target

d902179229da64281d22ab88d1345641bce607516fc3a31077676f5fbfe3ffcf
Size

135KB
MD5

6d30dd823c47f3539006743d225cec90
SHA1

805be08713f39f3ae44d36b65dd6ba387f1d81b4
SHA256

d902179229da64281d22ab88d1345641bce607516fc3a31077676f5fbfe3ffcf
SHA512

7c9610a2a3f5d40bd6372ec8944b28c16dc614064fdcdb2aaf10039a2a3f6f808cfa552f37ffa0dded64e35ba7ed5a8e47911c026994838c67955cec2bf9e24f
SSDEEP

3072:TCNtcBcl4QsvPON2c8z3maQoQebPd7Dh9DaCRProlfLx:TGtYcl4Vrc23maHPFF95cdx

Score

N/A

Malware Config

Signatures

Files

d902179229da64281d22ab88d1345641bce607516fc3a31077676f5fbfe3ffcf
.exe windows x86

0074c97bda9e61cbe301b88a690e19af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA
PrintDlgExW
FindTextW
ChooseColorW
CommDlgExtendedError

kernel32

DeleteCriticalSection
LocalUnlock
FoldStringW
SearchPathA
CreateFileW
EnumResourceNamesA
WaitForMultipleObjects
EnumResourceNamesW
TlsSetValue
DisconnectNamedPipe
GetCommandLineA
CreateFileA
GetModuleFileNameW
GetUserDefaultUILanguage
GetModuleHandleA
RemoveDirectoryW
GetLocalTime
GetVersionExA
RaiseException
DeleteFileW
FindResourceExA
ExitThread
SetTimerQueueTimer
GetFileAttributesExA
SetUnhandledExceptionFilter
GetThreadLocale
CopyFileA
TlsGetValue
GetModuleFileNameA
SetHandleCount
SearchPathW
GlobalFlags
GetLastError
GetCurrentThread
CreateDirectoryA
AreFileApisANSI
FindCloseChangeNotification
GlobalFindAtomW
CloseHandle
SetMailslotInfo
SetThreadPriority
GetCurrentThreadId
FindNextChangeNotification
MapViewOfFile
MoveFileA
CompareStringA
InitializeCriticalSection
lstrlenA
GetUserDefaultLangID
SetupComm
GlobalGetAtomNameA
FindNextFileW
CompareFileTime
HeapSize
GetUserDefaultLCID
lstrcmpA
GetFileAttributesW
CreateWaitableTimerA

user32

RedrawWindow
GetKeyState
ShowScrollBar
CreateCursor
ShowWindow
DestroyAcceleratorTable
MonitorFromRect
CopyImage
IsCharUpperA
DeferWindowPos
FindWindowW
InsertMenuItemW
CheckRadioButton
SendMessageTimeoutA
VkKeyScanA
IsCharLowerA
SystemParametersInfoA
CopyAcceleratorTableW
MapVirtualKeyA
SetSysColors
MessageBoxA
InvalidateRgn
GetSubMenu
GetScrollRange
TranslateMessage
GetMenuStringA
SetWindowRgn
DrawTextA
GetMenuState
wvsprintfW
DrawStateW
SetCaretPos
CreateIconIndirect
IsZoomed
ChildWindowFromPointEx
KillTimer
wvsprintfA
SetWindowTextA
PostThreadMessageW
RemovePropW
IsCharAlphaA
OffsetRect
DialogBoxIndirectParamW
PostMessageA
LoadStringW
InSendMessage
IntersectRect
GetScrollPos
GetWindowTextA
InternalGetWindowText
CreateIconFromResource
GetTopWindow
InvertRect
CheckMenuItem
GetAsyncKeyState
EnumThreadWindows
DialogBoxParamA
SetClassLongW
UnloadKeyboardLayout
SetMenuItemInfoW
GetWindowDC
GetUserObjectInformationW
TranslateAcceleratorW
GetDoubleClickTime
DefWindowProcW
SetDlgItemTextA
IsRectEmpty
GetWindow
CreatePopupMenu
GetSystemMenu
GetLastActivePopup
InvalidateRect
keybd_event
VkKeyScanW
LoadAcceleratorsW
SetWindowTextW
DrawTextW
DestroyMenu
AttachThreadInput
GetKeyboardLayout
GetClassInfoExA
GetMessageExtraInfo
CallWindowProcW
PeekMessageA
GetDlgItem
ReplyMessage
CreateDialogIndirectParamW
WaitForInputIdle
BeginPaint
SetCursor
FrameRect
GetMessageW
SetWindowPlacement
GetShellWindow
EnableWindow
InsertMenuW
SetRectEmpty
FindWindowExA
RemoveMenu
DefFrameProcA
GetCursorPos
SetPropW
AllowSetForegroundWindow
SwitchToThisWindow
LoadCursorW
OemToCharBuffA
LoadStringA
SendMessageTimeoutW
GetSysColorBrush
GetKeyboardLayoutList
GetForegroundWindow
PostQuitMessage
DefFrameProcW
DestroyCursor
CharLowerA
PostThreadMessageA
ShowWindowAsync
GetParent
GetMenuItemID
SetLastErrorEx
SetDlgItemInt
DialogBoxParamW
CharUpperW
mouse_event

msvcrt

_controlfp
__set_app_type
floor
ftell
iswspace
__p__fmode
calloc
wcscat
isprint
strncpy
strrchr
exit
mktime
__p__commode
wcsncmp
setvbuf
strspn
_amsg_exit
_initterm
fprintf
_ismbblead
wcsstr
_XcptFilter
wcspbrk
wcstoul
_exit
iswdigit
toupper
_cexit
swscanf
strtok
srand
towupper
strerror
vsprintf
clearerr
realloc
qsort
fwrite
iswctype
wcstod
clock
wcscspn
strcpy
__setusermatherr
strpbrk
__getmainargs

Exports

Exports

?RegenerateMainValues@@YGKPBDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.emnar
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fire
Size: 1KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imper
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wchar
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0074c97bda9e61cbe301b88a690e19af

Headers

File Characteristics

Imports

comdlg32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.emnar Size: 512B - Virtual size: 126B

.fire Size: 1KB - Virtual size: 119KB

.data Size: 2KB - Virtual size: 1KB

.imper Size: 6KB - Virtual size: 6KB

.wchar Size: 1024B - Virtual size: 614B

.wdata Size: 1024B - Virtual size: 704B

.rsrc Size: 99KB - Virtual size: 99KB

.text
Size: 22KB - Virtual size: 22KB

.emnar
Size: 512B - Virtual size: 126B

.fire
Size: 1KB - Virtual size: 119KB

.data
Size: 2KB - Virtual size: 1KB

.imper
Size: 6KB - Virtual size: 6KB

.wchar
Size: 1024B - Virtual size: 614B

.wdata
Size: 1024B - Virtual size: 704B

.rsrc
Size: 99KB - Virtual size: 99KB