a97d3df3bf64e8fd3790eca49430ac231ce90ea6d1316b7c4962109f68f6141a

Sharing

Copy URL Twitter E-mail

General

Target

a97d3df3bf64e8fd3790eca49430ac231ce90ea6d1316b7c4962109f68f6141a
Size

654KB
MD5

915c9b530ec9e0e2b5c9b3cbd44d3d1d
SHA1

150de16523024c649335b8cd6f9e68438a74956c
SHA256

a97d3df3bf64e8fd3790eca49430ac231ce90ea6d1316b7c4962109f68f6141a
SHA512

7769e54d5cf8be314eb4846a99534a92d2aeafb75df575429358fc5b9bf62080bd456eb04a38003137ccb496d28eb255f46db056457720e6b4c76a6fab6cdfb6
SSDEEP

12288:ZY8A13nyBLNRwHzdDU9Snua9EBbIBSCusYn:u3yBczyX2Ex6SxsW

Score

N/A

Malware Config

Signatures

Files

a97d3df3bf64e8fd3790eca49430ac231ce90ea6d1316b7c4962109f68f6141a
.exe windows x86

6eda3b81824a68bd427f0ce0bb0af3d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

HeapReAlloc
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
IsValidCodePage
GetCPInfo
GetOEMCP
VirtualQuery
SetStdHandle
GetStringTypeW
LCMapStringW
FlushFileBuffers
CreateFileW
InterlockedIncrement
GetProcAddress
GetModuleHandleW
GetModuleFileNameA
GetFileInformationByHandle
CloseHandle
GetModuleHandleA
GetFileType
EnumSystemCodePagesW
GetLastError
HeapSize
FileTimeToSystemTime
HeapCreate
GetEnvironmentStrings
GetProcessHeap
FreeEnvironmentStringsA
InterlockedDecrement
HeapAlloc
GetACP
GetConsoleMode
GetConsoleCP
SetFilePointer
IsProcessorFeaturePresent
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
WriteFile
QueryPerformanceCounter
SetLastError
TlsFree
TlsSetValue
LoadResource
FindResourceA
GetFileSize
CreateFileA
TlsGetValue
TlsAlloc
HeapQueryInformation
HeapFree
ExitProcess
FreeLibrary
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
EncodePointer
DecodePointer
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeEnvironmentStringsW

user32

CopyRect
SetClipboardData
LoadImageA
SetWindowTextA
UnhookWindowsHookEx
OpenClipboard
DispatchMessageA
GetCursorPos
GetSysColor
DestroyWindow
GetMessageA
FillRect
SetCapture
DrawTextA
SetFocus
SendMessageA
GetDC
GetWindowTextA
GetKeyboardLayout
MessageBoxA
CreateWindowExA
GetDlgItem
EndDialog

gdi32

SetTextColor
EndPage
BitBlt
DescribePixelFormat
StartPage
MaskBlt
DeleteDC
CreateDIBSection
CreateFontIndirectA
SetPixel
CreateBitmap
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
DPtoLP
SetMapMode
StartDocA
GetMapMode
Polyline
CreatePen
ChoosePixelFormat
SetPixelFormat
GetPixel
GetObjectA
EndDoc
TextOutA

comdlg32

PrintDlgA

advapi32

SetEntriesInAclA

ole32

CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoCreateInstance

oleaut32

SysFreeString
VariantClear
SysAllocString

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

SHQueryValueExW
StrToIntExA

comctl32

ImageList_AddMasked
ImageList_Create
ImageList_Destroy

rpcrt4

NdrOleAllocate

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

setupapi

SetupDiInstallDevice
SetupDiDeleteDeviceInterfaceRegKey

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.udata
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relob
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6eda3b81824a68bd427f0ce0bb0af3d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

version

shlwapi

comctl32

rpcrt4

imm32

setupapi

Sections

.text Size: 145KB - Virtual size: 144KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 4KB - Virtual size: 12KB

.udata Size: 198KB - Virtual size: 198KB

.adata Size: 3KB - Virtual size: 2KB

.relob Size: 4KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 257KB - Virtual size: 257KB

.text
Size: 145KB - Virtual size: 144KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 4KB - Virtual size: 12KB

.udata
Size: 198KB - Virtual size: 198KB

.adata
Size: 3KB - Virtual size: 2KB

.relob
Size: 4KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 257KB - Virtual size: 257KB