179c82e7b83c3b9915542e90a7914988535b439d35c5e6ac906f9848d2c1f7cf

Sharing

Copy URL Twitter E-mail

General

Target

179c82e7b83c3b9915542e90a7914988535b439d35c5e6ac906f9848d2c1f7cf
Size

141KB
MD5

757a6596b17ef9190fe8706805b352c1
SHA1

da5dd9e2366ddd803ccc97ebabeb4a45998e8c96
SHA256

179c82e7b83c3b9915542e90a7914988535b439d35c5e6ac906f9848d2c1f7cf
SHA512

a785092ccb2916053969f7d174873d138845731954bb82c0452a9c25cd02612f97fcc8a75a8c48fa43a9469456be4546882fa5c23d286851869584097c8212c4
SSDEEP

3072:6oXonyhTyX559tAcLQHRN5x8XhcEcPfFwZ+9M:VHT455XAVH7YcEcPfFw4

Score

N/A

Malware Config

Signatures

Files

179c82e7b83c3b9915542e90a7914988535b439d35c5e6ac906f9848d2c1f7cf
.exe windows x86

9a786a266cf78e70cbf2f5350eb3af30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

swprintf
clock
_acmdln
wcsncmp
sprintf
tolower
mbstowcs
memset
exit
rand
calloc
srand

kernel32

SetLastError
SetHandleCount
GetCurrentProcess
FindFirstFileA
VirtualAlloc
MulDiv
WriteFile
FreeLibrary
lstrcmpA
VirtualAllocEx
LocalAlloc
lstrcmpiA
lstrcpyA
GetDiskFreeSpaceA
ExitProcess
SetFilePointer
GetTickCount
GetStartupInfoA
lstrlenA
LoadLibraryA
GetSystemDefaultLangID
GetVersionExA
WideCharToMultiByte

user32

ShowScrollBar
CheckMenuItem
GetSysColor
SetPropA
GetClassNameA
DrawTextA
PostMessageA
ScrollWindow
SetScrollPos
wsprintfA
GetKeyboardType
GetKeyboardLayoutNameA
GetScrollRange
SetScrollInfo
PeekMessageW
MessageBoxA
PostQuitMessage
IsMenu
DeleteMenu
MapVirtualKeyA
EnumChildWindows
CallWindowProcA
GetCursor
SetClipboardData
MsgWaitForMultipleObjects
IsCharUpperA
GetWindowTextLengthA
IsIconic
DrawEdge
IsCharLowerA
RegisterClipboardFormatA
GetMessagePos
GetMenuItemCount
SetActiveWindow
BeginPaint
DefWindowProcA
GetDesktopWindow
GetWindowLongW
DispatchMessageA
EmptyClipboard
GetFocus
ShowWindow
DestroyIcon
GetWindowPlacement
GetKeyboardLayout
GetMenuItemInfoA
GetClassInfoA
SetTimer
RegisterClassA
SetForegroundWindow
PtInRect
LoadBitmapA
GetMenu
LoadIconA
MessageBeep
SetWindowLongW
DrawIcon
GetTopWindow
GetForegroundWindow
UpdateWindow
IsDlgButtonChecked

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueA

Exports

Exports

RknHX@20

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a786a266cf78e70cbf2f5350eb3af30

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 9KB - Virtual size: 141KB

.data Size: 110KB - Virtual size: 110KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1024B - Virtual size: 873B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 9KB - Virtual size: 141KB

.data
Size: 110KB - Virtual size: 110KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1024B - Virtual size: 873B

.rsrc
Size: 8KB - Virtual size: 8KB