f4a6ee179cda8e4206d1eaf1176378317ecbc656fc524d7a7672655672e3fb32

Sharing

Copy URL Twitter E-mail

General

Target

f4a6ee179cda8e4206d1eaf1176378317ecbc656fc524d7a7672655672e3fb32
Size

138KB
MD5

a0f944e39076bb3b168a5aa4a6774250
SHA1

288210a265d800cbfc8d71159c301b9dc1b23d3f
SHA256

f4a6ee179cda8e4206d1eaf1176378317ecbc656fc524d7a7672655672e3fb32
SHA512

b7360d070f3bb49763ef90a6418ef8cead08dcf1a8a945f9b17211d7cf39de114f42004ae9f868ed2d9a228c168643b5bd41ceb6c8f06dd219cc467171708a5a
SSDEEP

3072:YT/KdGegA2jF1ZiGKZ5HcQcJPVQSco0VdrWUBe3cTTGeo9e9wIFOH:YT/Kcee1NglcQcJuSedrHGeowC

Score

N/A

Malware Config

Signatures

Files

f4a6ee179cda8e4206d1eaf1176378317ecbc656fc524d7a7672655672e3fb32
.exe windows x86

486b43cedcfcea7264cf673a12db50af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
CloseHandle
VerSetConditionMask
InitializeCriticalSection
QueryPerformanceCounter
IsDebuggerPresent
MultiByteToWideChar
LoadLibraryExW
GetCurrentThreadId
FlushInstructionCache
lstrcmpW
SetUnhandledExceptionFilter
ReadFile
GetStdHandle
FreeLibrary
GetModuleFileNameW
RaiseException
TerminateProcess
GetProcessHeap
GetModuleHandleW
CreateProcessW
Sleep
VerifyVersionInfoW
InterlockedExchange
SetLastError
HeapFree
LoadLibraryA
HeapAlloc
MulDiv
OutputDebugStringW
GlobalLock
lstrlenW
GlobalHandle
LoadResource
GlobalUnlock
LockResource
VirtualFree
GetSystemTimeAsFileTime
GlobalAlloc
DeleteCriticalSection
GlobalFree
UnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
VirtualAlloc
GetProcAddress
PeekNamedPipe
GetLastError
EnterCriticalSection
lstrcmpiW
IsProcessorFeaturePresent
GetStartupInfoW
InterlockedCompareExchange
SetProcessShutdownParameters
LeaveCriticalSection
WaitForSingleObject
FindResourceW
GetVersion
VirtualProtect
GetModuleHandleA
GetModuleFileNameA
GetTickCount
InterlockedDecrement
InterlockedIncrement
CompareStringW
ExitProcess

user32

DialogBoxParamW
GetSysColorBrush
GetSystemMenu
GetAncestor
GetMenuState
MapWindowPoints
ReleaseCapture
CreateDialogParamW
GetWindowRect
GetClassInfoExW
IsIconic
SendNotifyMessageW
DrawIconEx
GetClassNameW
FlashWindowEx
GetDlgCtrlID
IsDialogMessageW
LockWindowUpdate
GetWindowPlacement
SetWindowTextW
CreateDialogIndirectParamW
CreateMenu
LoadImageW
SetActiveWindow
OffsetRect
DrawFocusRect
GetWindowTextW
GetDesktopWindow
GetMenuItemID
InvalidateRgn
GetSystemMetrics
GetClipboardData
IsChild
DestroyIcon
SetWindowLongW
SystemParametersInfoW
GetDC
CreateAcceleratorTableW
EndPaint
ScreenToClient
GetMonitorInfoW
CreatePopupMenu
PtInRect
IsWindowVisible
MoveWindow
SetCapture
EndDialog
SetWindowPos
GetIconInfo
IsZoomed
CharNextW
SetTimer
UnregisterClassA
MonitorFromWindow
ShowWindow
MonitorFromRect
LoadBitmapW
DefWindowProcW
LoadCursorW
SendMessageW
IsWindow
GetMenuItemCount
MessageBeep
GetWindowTextLengthW
ReleaseDC
InflateRect
GetKeyState
SendDlgItemMessageW
GetUpdateRgn
DestroyMenu
PostQuitMessage
UpdateWindow
RedrawWindow
IsWindowEnabled
GetDlgItem
MessageBoxW
GetActiveWindow
GetClientRect
CallWindowProcW
GetCapture
GetNextDlgTabItem
IntersectRect
EqualRect
TranslateMessage
RegisterClassExW
CreateWindowExW
FindWindowExW
SetWindowPlacement
GetCursorPos
IsMenu
EnumDisplayMonitors
ExitWindowsEx
GetMessageTime
TrackPopupMenuEx
OpenClipboard
GetMenuItemInfoW
EnableWindow
RegisterWindowMessageW
EnableMenuItem
InvalidateRect
CloseClipboard
SetRectEmpty
SetWindowRgn
PostMessageW
GetMessagePos
GetParent
CharPrevW
SetForegroundWindow
GetFocus
GetForegroundWindow
GetWindowLongW
SetCursor
DestroyWindow
GetPropW
GetSysColor
TrackMouseEvent
DispatchMessageW
BeginPaint
DrawTextW
ClientToScreen
CopyRect
AppendMenuW
InsertMenuItemW
SetFocus
DestroyAcceleratorTable
KillTimer
PeekMessageW
FillRect
IsRectEmpty
GetWindow
SetRect

gdi32

CreateRectRgn
GetDeviceCaps
CreateCompatibleBitmap
Polyline
CreateSolidBrush
GetTextMetricsW
SetBkMode
SelectObject
GetClipRgn
SelectClipRgn
DeleteObject
SetBkColor
CreateFontIndirectW
SetTextColor
SetDCPenColor
GetTextExtentPoint32W
CreateCompatibleDC
SetDCBrushColor
BitBlt
RectInRegion
GetStockObject
DeleteDC
CombineRgn
GetObjectW

comdlg32

GetOpenFileNameW

advapi32

RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey

shell32

ExtractIconExW
ShellExecuteW

oleaut32

OleCreateFontIndirect
LoadRegTypeLi
VariantInit
SysStringLen
SysAllocString
VariantClear
SysStringByteLen
VarUI4FromStr
SysAllocStringLen
SysFreeString
LoadTypeLi
SysAllocStringByteLen
GetErrorInfo

comctl32

_TrackMouseEvent

avifil32

EditStreamCopy

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

486b43cedcfcea7264cf673a12db50af

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

comctl32

avifil32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 47KB - Virtual size: 106KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 47KB - Virtual size: 106KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 2KB - Virtual size: 1KB