d6ae512ea7850c9ff5b39561003444e45bb875eece92910abe96fec01b9f8d0e

Sharing

Copy URL Twitter E-mail

General

Target

d6ae512ea7850c9ff5b39561003444e45bb875eece92910abe96fec01b9f8d0e
Size

256KB
MD5

00200e51d205cfd31247bbef3c1bd001
SHA1

fe955f3d8cb6cc82c623b7df4771b783f3ae97cb
SHA256

d6ae512ea7850c9ff5b39561003444e45bb875eece92910abe96fec01b9f8d0e
SHA512

777f0f2718c3ff1cd96ec25a1b8a4cff40e5a326a0930ab1aa970b676c61b31c98fcdbbfb1c7aefa215497d15bb0f9b604a67f40de2cac56b867c808ea9d2496
SSDEEP

3072:mrDawQ05966sLbvJnllJ0AYzLFHUTqOVXmqA3gYyEUkvGC7N+sTUg:MQoQ6kb0ROhmqPYoduNf

Score

N/A

Malware Config

Signatures

Files

d6ae512ea7850c9ff5b39561003444e45bb875eece92910abe96fec01b9f8d0e
.exe windows x86

4f374810aec9c9a403805571a53ae8dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
DestroyWindow
ShowWindow
CreateDialogParamA
MessageBoxA
GetDesktopWindow
SendMessageA
FindWindowA
OffsetRect
ExitWindowsEx
SetWindowPos
SetDlgItemTextA
CopyRect
GetWindowRect

comctl32

ord17

advapi32

IsValidSecurityDescriptor
RegOpenKeyExA
RegQueryValueExW
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
FreeSid
AccessCheck
RegSetValueExA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RevertToSelf

shell32

SHGetSpecialFolderPathA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetCommandLineA
WritePrivateProfileStringA
WritePrivateProfileSectionA
GetStringTypeW
GetPrivateProfileSectionA
CreateFileA
FlushFileBuffers
GetStringTypeA
WriteFile
RtlUnwind
SetStdHandle
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEndOfFile
ReadFile
SetFilePointer
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetStartupInfoA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
GetPrivateProfileStringA
Sleep
lstrcmpA
FindClose
FindNextFileA
FindFirstFileA
SetLastError
GetModuleHandleA
DeleteFileA
MoveFileExA
SetFileAttributesA
GetFileAttributesA
GetSystemDirectoryA
CloseHandle
GetExitCodeProcess
RemoveDirectoryA
GetCurrentProcess
GetVersionExA
LocalFree
LocalAlloc
GetCurrentThread
HeapAlloc
HeapFree
FreeEnvironmentStringsA
WideCharToMultiByte
LoadResource
FindResourceExA
LoadLibraryW
GetUserDefaultLangID
MultiByteToWideChar
GetWindowsDirectoryA
UnhandledExceptionFilter
lstrcpyA
lstrlenA
LCMapStringW
GetEnvironmentVariableA
HeapReAlloc
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
LCMapStringA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f374810aec9c9a403805571a53ae8dd

Headers

File Characteristics

Imports

user32

comctl32

advapi32

shell32

version

kernel32

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 170KB

.rsrc Size: 180KB - Virtual size: 180KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 170KB

.rsrc
Size: 180KB - Virtual size: 180KB