61b14e1da4801e06588cfd1ad21103a0f692423d8a67eeb32cd80787f095fed8

Sharing

Copy URL Twitter E-mail

General

Target

61b14e1da4801e06588cfd1ad21103a0f692423d8a67eeb32cd80787f095fed8
Size

196KB
MD5

a192c6558b8ccdb6849860df745abe00
SHA1

dbebd477d9dcff38e162bd430082f7abd24f8d39
SHA256

61b14e1da4801e06588cfd1ad21103a0f692423d8a67eeb32cd80787f095fed8
SHA512

9631fa188e042160e4dc3f69d8e3f9bac46e81ab03c19089c9be0e371c33f05e3b81576cdba18472119de401c00f2237d005d732bb6a8a0f08edb126108b2321
SSDEEP

1536:ZVLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNyyriH4wkfdDcGAN28KD+YzGJQ:OvyrfbfWEPzU7fNSa2+eiH43fEZKfV

Score

N/A

Malware Config

Signatures

Files

61b14e1da4801e06588cfd1ad21103a0f692423d8a67eeb32cd80787f095fed8
.exe windows x86

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrcatW
VirtualAlloc
HeapAlloc
GetProcessHeap
_lclose
WideCharToMultiByte
WaitForSingleObject
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrlenW
CloseHandle

user32

UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperA
CharNextA
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsZoomed

gdi32

DeleteMetaFile
DeleteObject
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
CreatePatternBrush
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
CreateSolidBrush
RestoreDC
CloseMetaFile
CreatePalette
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen

advapi32

RegQueryValueExW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

winmm

timeGetTime

msvcrt

memset
memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a0
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 1024B - Virtual size: 1020B

.a0 Size: 20KB - Virtual size: 19KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 1024B - Virtual size: 1020B

.a0
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 39KB - Virtual size: 39KB