21a80f3dd9b40e2be99519c5470ab717495f4a387597f3f663086aa6f6967591

Sharing

Copy URL Twitter E-mail

General

Target

21a80f3dd9b40e2be99519c5470ab717495f4a387597f3f663086aa6f6967591
Size

322KB
MD5

7c7fb16f9109f6e1ec5f4f45765c71c1
SHA1

76fa9e5b118302647c6a1f705737f40fa8ade38c
SHA256

21a80f3dd9b40e2be99519c5470ab717495f4a387597f3f663086aa6f6967591
SHA512

0bc2d310e282d17c33e310d502d7f54380d58809ac7cfb79bf3d90d54be987b8bad1d4610be6e32e832ef4fc5d84141e3e04b1397ce895036abedfb43a340bfb
SSDEEP

6144:R32p5Xp6qbGy6pPHprkATEaiss4UCNdBMYK8SBjOP6sNRGk3Y3/A4:6556q6y6ZHxHTH2qNdhK/wx2

Score

N/A

Malware Config

Signatures

Files

21a80f3dd9b40e2be99519c5470ab717495f4a387597f3f663086aa6f6967591
.exe windows x86

49efcc0834ee3b3afc477bed025f14f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FindNextVolumeW
SetFileAttributesW
OpenFile
GetDiskFreeSpaceW
FatalAppExitA
GetSystemTime
GetProcessShutdownParameters
RtlFillMemory
RequestDeviceWakeup
CreateIoCompletionPort
DefineDosDeviceA
LocalFlags
GetCurrentThread
GetDevicePowerState
GetLocalTime
LocalCompact
SignalObjectAndWait
IsBadCodePtr
CreateSemaphoreW
WaitForSingleObject
FatalAppExitW
LocalHandle
SetSystemTimeAdjustment
SystemTimeToFileTime
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
SetEvent
GetCPInfoExA
GetThreadPriority
IsValidLanguageGroup
GetLastError

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoInitialize
CoTaskMemAlloc

user32

SetFocus
CharUpperW
ShowWindow
SetWindowLongW
EnumWindows
SetWindowPlacement
LoadStringW
SetScrollPos
EnableMenuItem
GetSystemMenu
DragObject
CreateDialogParamW
EnableWindow
RegisterWindowMessageW
GetForegroundWindow
CloseClipboard
SetCursor
InvalidateRect
UpdateWindow
DialogBoxParamW
DrawIconEx
GetKeyboardLayout
DestroyWindow
FindWindowW
GetDlgItem
CreateWindowExW
TranslateMessage
MessageBeep
EndDialog
ScreenToClient
DrawTextExW
LoadIconW
MsgWaitForMultipleObjects
TranslateAcceleratorW
ChildWindowFromPoint
DrawFocusRect
SetForegroundWindow
GetFocus
GetSysColor
GetClientRect
SendDlgItemMessageW
GetDesktopWindow
ReleaseDC
MessageBoxW
SendMessageW
GetWindowPlacement
IsClipboardFormatAvailable
GetAltTabInfoW
DispatchMessageW
PostQuitMessage
GetMenu
RegisterClassW
IsIconic
CharLowerW
MoveWindow
SetDlgItemTextW
wsprintfW
GetSubMenu
GetWindowThreadProcessId
RegisterClassExW
GetCursorPos
PeekMessageW
GetWindowTextW
SetActiveWindow
GetMessageW
SetWindowTextW
GetDC
LoadImageW
GetMenuState

comctl32

ImageList_Create
ImageList_ReplaceIcon
CreatePropertySheetPageW

advapi32

RegOpenKeyExW
RegQueryValueExA
IsTextUnicode
RegCreateKeyW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW
CommDlgExtendedError

shlwapi

SHDeleteKeyW
StrCmpW
StrToIntW
StrCpyW
StrCpyNW
StrStrIW

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49efcc0834ee3b3afc477bed025f14f1

Headers

File Characteristics

Imports

kernel32

ole32

user32

comctl32

advapi32

comdlg32

shlwapi

Sections

.text Size: 228KB - Virtual size: 227KB

.data Size: 86KB - Virtual size: 86KB

.rsrc Size: 3KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 3KB

.text
Size: 228KB - Virtual size: 227KB

.data
Size: 86KB - Virtual size: 86KB

.rsrc
Size: 3KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 3KB