ecd25d6a556e7ca8f8e69f195e6a9267d4f12921455bef48132843164d560f7a

Sharing

Copy URL

Twitter E-mail

General

Target

ecd25d6a556e7ca8f8e69f195e6a9267d4f12921455bef48132843164d560f7a
Size

873KB
MD5

96d428711399824e5d7fc032efd04080
SHA1

0011e5f8e2819363f37419c9b0cfa32072d51d69
SHA256

ecd25d6a556e7ca8f8e69f195e6a9267d4f12921455bef48132843164d560f7a
SHA512

971a6cc54932d23fdcb0301a2901a759845d82a9041ed5812dc3c77c5de20a3e8503c92a98109da0f1a65a0b3f5c8a23adde3135699c3a20e2c51858e0e8bd3d
SSDEEP

12288:MfN81tr8VAKMu8nB4vdkZWqTx4IuimAtHuAd+cdK0YjZuwU:R1CVArB4v0WjIjtxK0YvU

Score

N/A

Malware Config

Signatures

Files

ecd25d6a556e7ca8f8e69f195e6a9267d4f12921455bef48132843164d560f7a
.exe windows x86

bc6d980aecf82e280fbb8a5c026576c5

Code Sign

51:8f:d9:6d:90:4b:da:75:53:b9:88:82:f3:89:91:f9:77:89:32:e7
Signer

Actual PE Digest

51:8f:d9:6d:90:4b:da:75:53:b9:88:82:f3:89:91:f9:77:89:32:e7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01-01-0001 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpEndRequestA

kernel32

WriteFile
ExitProcess
VirtualAlloc
GetModuleHandleW
CreateFileMappingA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
HeapReAlloc
GetVersion
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
GetModuleHandleA
GetProcAddress
GetVersionExA
GetCommandLineA
lstrcmpiA
GetLastError
QueryPerformanceCounter
GetTickCount
CreateFileA
ReadFile
SetFilePointer
CreateThread
GetCurrentProcessId
GetStartupInfoA
GetSystemTimeAsFileTime
SetErrorMode
GetCurrentThreadId
CreateDirectoryW
TlsGetValue
CloseHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
HeapAlloc

user32

ShowWindow
MessageBoxA
GetSystemMetrics
CreateWindowExA
ShowScrollBar
ShowCursor
ShowOwnedPopups
TranslateMessage
ValidateRect
WaitMessage
WindowFromPoint
SetScrollPos
SetScrollRange
SetWindowLongA
SetWindowPlacement
SetWindowPos

gdi32

SetAbortProc
GetLogColorSpaceW
DeleteMetaFile
OffsetWindowOrgEx
TextOutW
SetBkColor
SetBkMode
SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
UnrealizeObject
Rectangle
SelectPalette
SetBrushOrgEx

comdlg32

FindTextW
GetOpenFileNameA
GetSaveFileNameA
ReplaceTextW
ChooseFontA

advapi32

RegCloseKey
AllocateAndInitializeSid
RegCreateKeyExA

shell32

StrStrIA
ShellExecuteA

ole32

CoTaskMemAlloc

oleaut32

SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
VarDecRound
VarRound
VarNumFromParseNum
SafeArrayRedim
SafeArrayPutElement

Sections

.text
Size: 700KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc6d980aecf82e280fbb8a5c026576c5

Code Sign

51:8f:d9:6d:90:4b:da:75:53:b9:88:82:f3:89:91:f9:77:89:32:e7Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

Headers

File Characteristics

Imports

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 700KB - Virtual size: 696KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 152KB - Virtual size: 148KB

51:8f:d9:6d:90:4b:da:75:53:b9:88:82:f3:89:91:f9:77:89:32:e7
Signer

01-01-0001 00:00
Valid: false

.text
Size: 700KB - Virtual size: 696KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 152KB - Virtual size: 148KB