1710dcf08f1507e40c3f6f08ddabaf6f6bf0c310f785832ba7e455f83533444c

Sharing

Copy URL Twitter E-mail

General

Target

1710dcf08f1507e40c3f6f08ddabaf6f6bf0c310f785832ba7e455f83533444c
Size

494KB
MD5

a15ffb10eb8834f18e96877002cf90b4
SHA1

7ce9afbec6fa52e9b9c526bead98ff13cefc3e02
SHA256

1710dcf08f1507e40c3f6f08ddabaf6f6bf0c310f785832ba7e455f83533444c
SHA512

fb139cde1828f4218e0c6a50a834c05e77ccde9ff4ab0f3f69ca6d5ae46db983ef808665e0ebd3d63d3c23313dc0838374cbad9f0cf76a28c9f74424b321add6
SSDEEP

12288:M/ufrM/xUWj7mi4Fz1fv/oPS2egdRD17p7J4EoUyBRiI:VApiBztXoPzdD7JxY6I

Score

N/A

Malware Config

Signatures

Files

1710dcf08f1507e40c3f6f08ddabaf6f6bf0c310f785832ba7e455f83533444c
.exe windows x86

5d5ee1905020ed3bd6889f20b13222c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ModifyWorldTransform
SetPolyFillMode
SetBrushOrgEx
CopyEnhMetaFileA
EnumEnhMetaFile
ExtCreatePen
FillRgn
CreateCompatibleBitmap
GetKerningPairs

kernel32

GetCommandLineW
CreateMutexA
HeapSize
DeleteCriticalSection
GetCurrentProcess
TlsGetValue
GetStdHandle
HeapAlloc
EnumSystemLocalesA
FreeEnvironmentStringsA
SetHandleCount
LCMapStringW
VirtualFree
GetCPInfo
SetEnvironmentVariableA
GetStartupInfoW
CloseHandle
HeapReAlloc
VirtualQuery
GetACP
VirtualAlloc
InitializeCriticalSection
SetStdHandle
CompareStringA
GetModuleHandleA
LCMapStringA
GetStartupInfoA
GetCurrentProcessId
GetTimeZoneInformation
EnterCriticalSection
GetEnvironmentStringsW
GetStringTypeW
HeapDestroy
VirtualProtect
RtlUnwind
HeapCreate
TransmitCommChar
GetTickCount
GetCurrentThreadId
WriteFile
TlsFree
GetProcAddress
MultiByteToWideChar
GetSystemTimeAsFileTime
TlsAlloc
WideCharToMultiByte
GetStringTypeA
GetEnvironmentStrings
GetUserDefaultLCID
SetFilePointer
GetCurrentThread
GetCommandLineA
LeaveCriticalSection
LoadLibraryA
FreeEnvironmentStringsW
GetLocaleInfoW
GetOEMCP
GetLocaleInfoA
GetVersionExA
HeapFree
QueryPerformanceCounter
TerminateProcess
TlsSetValue
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
UnhandledExceptionFilter
CompareStringW
InterlockedExchange
SetLastError
GetSystemInfo
IsValidLocale
FlushFileBuffers
IsValidCodePage
IsBadWritePtr
OpenMutexA
ReadFile
GetFileType
GetTimeFormatA
GetDateFormatA
GetLastError

user32

ShowWindow
RegisterClassA
MessageBoxW
RegisterClassExA
CreateWindowExA
OpenWindowStationW

comctl32

ImageList_DragShowNolock
ImageList_AddIcon
ImageList_Remove
InitCommonControlsEx
ImageList_AddMasked
ImageList_SetBkColor
CreateToolbarEx
DrawStatusText
MakeDragList
ImageList_LoadImage
ImageList_SetImageCount
ImageList_GetIcon
ImageList_LoadImageA
InitMUILanguage
ImageList_DrawEx
DestroyPropertySheetPage
CreatePropertySheetPageA
CreateToolbar

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d5ee1905020ed3bd6889f20b13222c2

Headers

File Characteristics

Imports

gdi32

kernel32

user32

comctl32

Sections

.text Size: 334KB - Virtual size: 334KB

.rdata Size: 35KB - Virtual size: 66KB

.data Size: 113KB - Virtual size: 113KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 334KB - Virtual size: 334KB

.rdata
Size: 35KB - Virtual size: 66KB

.data
Size: 113KB - Virtual size: 113KB

.rsrc
Size: 10KB - Virtual size: 9KB