26e84519f3875d3c579c95ec1694eff8224f75eaec63ae8970bc85ff1479f392

Sharing

Copy URL Twitter E-mail

General

Target

26e84519f3875d3c579c95ec1694eff8224f75eaec63ae8970bc85ff1479f392
Size

332KB
MD5

8218df9a934a465692fc6dabd33c9026
SHA1

04713802ae0e9f063c38f777697400fe00bb8377
SHA256

26e84519f3875d3c579c95ec1694eff8224f75eaec63ae8970bc85ff1479f392
SHA512

4f5f2522061e97252cd56c9f048099c269eeca44177383a32bbc0ab6d24d4b7f28e9abc336f4a1342730e677fbfe541be20cd69d1be5eb34523f7d0501b9470d
SSDEEP

6144:qKPvXDfwkjKXhLTNUd2MmGcUB6+QLtgQd69Wah7CGrRPg6Mdp0g86:x0hNUd2MaUg+WtgndFjRWPD86

Score

N/A

Malware Config

Signatures

Files

26e84519f3875d3c579c95ec1694eff8224f75eaec63ae8970bc85ff1479f392
.exe windows x86

6158a1247883ed9a9185dffa938210e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
HeapSize
FlushFileBuffers
SetStdHandle
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSection
Sleep
IsValidCodePage
GetACP
GetCPInfo
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FindResourceExA
GetEnvironmentStrings
FreeEnvironmentStringsA
ReadFile
MultiByteToWideChar
GetModuleFileNameA
ExitProcess
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
SetEndOfFile
GlobalFree
SystemTimeToFileTime
GetSystemTimeAsFileTime
WaitForSingleObject
GetFileSize
GetModuleHandleA
CreateEventA
LocalAlloc
HeapAlloc
UnmapViewOfFile
lstrlenA
GetProcAddress
LoadLibraryW
CloseHandle
EnumDateFormatsA
DeviceIoControl
LocalFree
CreateFileA
FileTimeToSystemTime
GetOEMCP
CreateFileMappingA
VirtualFree
DeleteCriticalSection
MapViewOfFileEx
GetLastError
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
FreeEnvironmentStringsW
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
RaiseException
GetStartupInfoA
GetProcessHeap
GetVersionExA
HeapFree
GetCommandLineA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteConsoleW
GetFileType
GetStdHandle

user32

LoadCursorA
MessageBoxA
EndPaint
RegisterClassA
AttachThreadInput
ShowCaret
FillRect
FindWindowA
SetScrollPos
LockWindowUpdate
GetMenuCheckMarkDimensions
DefWindowProcA
DrawFrameControl
BeginPaint
SendMessageA
InflateRect
GetDCEx
LoadBitmapA
GetClientRect
SetWindowLongA
InvalidateRect
CheckMenuItem
DestroyWindow
HideCaret
LoadStringA
IsClipboardFormatAvailable
DrawFocusRect
CreateAcceleratorTableA
IsRectEmpty
SetCaretPos
DialogBoxParamA
EndDialog
GetDC
GetScrollInfo
LoadIconA
SetScrollInfo
GetFocus
GetCursorPos
DrawMenuBar
GetDlgItem
ReleaseDC
PostQuitMessage
EnableMenuItem
SendDlgItemMessageA
CreateWindowExA
SetDlgItemInt

gdi32

LineTo
DeleteObject
DeleteDC
SetPixelFormat
CombineRgn
Rectangle
FillRgn
StartPage
GetObjectA
MoveToEx
CreateRectRgn
EndDoc
StartDocA
Escape
CreateCompatibleDC
CreatePen
CreateDIBSection
CreateSolidBrush
TextOutA
Ellipse
BitBlt
SetStretchBltMode
GetStockObject
EndPage
SelectObject
GetBkColor
CreateBitmap

comdlg32

PrintDlgA
GetOpenFileNameA

advapi32

GetUserNameW

shell32

DragFinish
SHBrowseForFolderA
DragQueryFileA

ole32

CreateStreamOnHGlobal
CoInitializeEx

oleaut32

UnRegisterTypeLi
VariantTimeToSystemTime

wininet

HttpEndRequestW

avifil32

AVIMakeCompressedStream

shlwapi

PathAppendA
PathFindNextComponentA
PathAddBackslashA

opengl32

wglMakeCurrent

dbghelp

ImageRvaToVa
ImagehlpApiVersion
ImageRvaToSection

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6158a1247883ed9a9185dffa938210e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

avifil32

shlwapi

opengl32

dbghelp

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 56KB - Virtual size: 62KB

.kdata Size: 12KB - Virtual size: 10KB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 56KB - Virtual size: 62KB

.kdata
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 60KB - Virtual size: 59KB