8136521b5edec3116712e44e83c95028b2be357924db224ea8ec8e6977896c1f

Sharing

Copy URL Twitter E-mail

General

Target

8136521b5edec3116712e44e83c95028b2be357924db224ea8ec8e6977896c1f
Size

1.4MB
MD5

0e716499b408ae68e9200b5ad4c66cc0
SHA1

2ca52bfc553d85fa480496f6effcd40e703e4013
SHA256

8136521b5edec3116712e44e83c95028b2be357924db224ea8ec8e6977896c1f
SHA512

be6e64c8dd56b33c15153006dc90331ad605477e47ba7b83452ca44f5a39beb6d7ba006af89824a8879660480c6860f7bd6360bbc8e30aa7b8b2526937829c31
SSDEEP

24576:o0cOwNjIohfwK58W0c3k9A99JFWt8HhGokqxTiAQn9VOYMRGJ/qof5T0:ofOkN58W0c3kejJcORpiAMnf1qIT0

Score

N/A

Malware Config

Signatures

Files

8136521b5edec3116712e44e83c95028b2be357924db224ea8ec8e6977896c1f
.exe windows x86

e9b39c8092deb6c54b4f786339533f0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
ReadFile
MultiByteToWideChar
GetFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LoadLibraryW
GetModuleFileNameA
CreateMutexW
WriteFile
CreateThread
WaitForSingleObject
GetLocalTime
GetCommandLineW
GetTickCount
SetFilePointer
EnumResourceLanguagesW
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
ConvertDefaultLocale
GetLocaleInfoW
GetVersionExW
GetCurrentProcess
GetSystemInfo
GetSystemWow64DirectoryW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
CreateProcessW
GetExitCodeProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ExitProcess
CreateFileW
SetEvent
GetEnvironmentVariableW
SetEndOfFile
LoadLibraryA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetOEMCP
GetACP
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
SetHandleCount
GetCurrentThreadId
SetLastError
GetFileType
GetStdHandle
HeapCreate
HeapDestroy
CopyFileW
GetTempFileNameW
GetTempPathW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
CreateEventW
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentDirectoryW
TlsGetValue
FreeLibrary
RemoveDirectoryW
GetProcAddress
MoveFileW
LoadLibraryExW
SetErrorMode
Sleep
GetFileAttributesW
CompareFileTime
LocalFree
GetModuleFileNameW
WideCharToMultiByte
CloseHandle
GetLastError
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceW
HeapReAlloc
VirtualAlloc
VirtualFree
GetModuleHandleA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetModuleHandleW
TlsFree
TlsSetValue
TlsAlloc
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
RaiseException
GetCPInfo
GetStartupInfoW
GetProcessHeap
GetVersionExA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetConsoleMode
GetConsoleCP
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange

user32

EndDialog
SetTimer
SetDlgItemTextW
MessageBoxW
wsprintfW
KillTimer
SendDlgItemMessageW
MonitorFromWindow
GetMonitorInfoW
OffsetRect
GetWindowLongW
AdjustWindowRect
GetWindowRect
GetDlgItem
DrawTextW
SetWindowTextW
LoadIconW
MessageBoxIndirectW
SetRectEmpty
PostMessageW
EnableWindow
ReleaseDC
GetDC
SetFocus
ShowWindow
DialogBoxIndirectParamW
SetWindowPos
GetClientRect
ExitWindowsEx
EnumWindows
SendMessageW
GetWindowThreadProcessId
GetWindowModuleFileNameW
SendMessageTimeoutW
LoadStringW
DialogBoxParamW

gdi32

GetTextExtentPoint32W
SelectObject
CreateCompatibleDC
DeleteObject
CreateFontW
GetStockObject
SetBkMode
SetTextColor
DeleteDC

advapi32

RegQueryValueExW
SetNamedSecurityInfoW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
IsTextUnicode
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
DeleteService
ControlService
StartServiceW
CloseServiceHandle
ChangeServiceConfigW
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
OpenSCManagerW
QueryServiceStatus
RegEnumKeyExW
RegDeleteValueW
RegQueryInfoKeyW
GetNamedSecurityInfoW

shell32

SHCreateDirectoryExW
SHGetFolderPathW
CommandLineToArgvW
SHCreateDirectoryExA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

cabinet

ord22
ord23
ord20
ord21

shlwapi

PathRemoveBackslashW
PathIsRootW
PathIsSystemFolderW
PathMatchSpecA
PathIsDirectoryW
PathAddBackslashW
PathFindExtensionW
PathCombineW
PathStripToRootW
SHDeleteKeyW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathFindFileNameA
PathAddBackslashA
PathRemoveFileSpecA
PathAppendA
PathFindFileNameW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW
EnumProcessModules

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1016KB - Virtual size: 1013KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9b39c8092deb6c54b4f786339533f0f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

cabinet

shlwapi

version

psapi

Sections

.text Size: 260KB - Virtual size: 257KB

.rdata Size: 52KB - Virtual size: 49KB

.data Size: 8KB - Virtual size: 17KB

.rsrc Size: 1016KB - Virtual size: 1013KB

.text
Size: 260KB - Virtual size: 257KB

.rdata
Size: 52KB - Virtual size: 49KB

.data
Size: 8KB - Virtual size: 17KB

.rsrc
Size: 1016KB - Virtual size: 1013KB