6bf59a9218866fca95ab6320cf35eb0f89238ad1a8a6d55bd975481e78490291

Sharing

Copy URL Twitter E-mail

General

Target

6bf59a9218866fca95ab6320cf35eb0f89238ad1a8a6d55bd975481e78490291
Size

146KB
MD5

a38fdd50abcad0a4ad6ca08062e1b8b0
SHA1

dd51846d018f82f3eb6ab31efc90f65a05c9e2bb
SHA256

6bf59a9218866fca95ab6320cf35eb0f89238ad1a8a6d55bd975481e78490291
SHA512

d424b4f6c9e3f72768cb87475b30c605b27c334533a98ccac1136e8a3f014e3970c3d1b61270be984914760a42edd6788f15e9bed59da7a0588a71c66860dee5
SSDEEP

3072:NzrQZV067hKC/sEJMMF76aZevm2RM/gLQkymX65vJfzV3jrIuttecA:N/80MbES5F7uvm2m/gLQkf613jrIGYz

Score

N/A

Malware Config

Signatures

Files

6bf59a9218866fca95ab6320cf35eb0f89238ad1a8a6d55bd975481e78490291
.exe windows x86

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
fflush
fputs
wcsncpy
wcscspn
iswprint
fputc
__set_app_type
memset
wcstod
gmtime
__p__fmode
strpbrk
wcstol
isxdigit
fread
__p__commode
towlower
strncmp
setlocale
_amsg_exit
_initterm
_ismbblead
localtime
wcsncmp
isupper
iswalpha
putchar
mktime
strstr
_XcptFilter
wcspbrk
atoi
fprintf
fgets
isalpha
puts
strcpy
iswspace
_exit
_cexit
__setusermatherr
__getmainargs
iswdigit
wcscat
sscanf
sprintf
printf

user32

DrawTextA
TrackPopupMenu
ValidateRect
MessageBoxExW
GetKeyboardType
SetLastErrorEx
GetIconInfo
ShowCaret
GetScrollPos
DialogBoxIndirectParamA
GetClipCursor
SetMenu
IsDialogMessageA
CharUpperBuffW
GetFocus
DestroyWindow
CharNextA
GetAsyncKeyState
LoadImageA
InvalidateRect
KillTimer
TabbedTextOutW
CharUpperA
MoveWindow
InflateRect
DialogBoxIndirectParamW
CharLowerBuffW
DrawAnimatedRects
CreateIconFromResource
GetDoubleClickTime
InternalGetWindowText
GetUserObjectInformationW
GetWindowLongA
IsCharAlphaNumericW
BringWindowToTop
GetWindowTextLengthW
OemToCharBuffA
SwitchToThisWindow
GetActiveWindow
OpenIcon
CheckDlgButton
LoadMenuA
CheckRadioButton
mouse_event
SetScrollInfo
CreateWindowExW
GetWindowModuleFileNameW
GetKeyState
SetDlgItemInt
SetWindowLongA
GetMenuStringA
GetClassNameW
TranslateAcceleratorW
GetWindowRect
InsertMenuA
IsMenu
GetDlgItemTextW
HiliteMenuItem
DrawStateA
GetPropW
TrackPopupMenuEx
LoadStringW
GetMessageA
GetDlgItemInt
MapVirtualKeyW
PostMessageA
DrawMenuBar
RegisterWindowMessageW
SetForegroundWindow
GetDialogBaseUnits
ChildWindowFromPointEx
GetWindowTextW
FindWindowExA
CharNextExA
wsprintfW
SetFocus
CreateIconIndirect
EnableWindow
DialogBoxParamA
RemovePropW
SendMessageA
ReplyMessage
ShowScrollBar
UpdateWindow
GetGUIThreadInfo
TranslateMessage
SendMessageW
LoadCursorA
OpenInputDesktop
GetMessageTime
PostThreadMessageW
GetSysColorBrush
CopyImage
GetSystemMenu
RegisterClassExW
SendDlgItemMessageA
DestroyAcceleratorTable
SetWindowTextW
GrayStringW
RegisterWindowMessageA
SetClassLongW
SendDlgItemMessageW
LockWindowUpdate
CloseDesktop
GetShellWindow
GetCaretBlinkTime
CopyAcceleratorTableW
UnloadKeyboardLayout
GetScrollRange
VkKeyScanW
GetMenuState
CreateAcceleratorTableW
GetParent
SetPropW
GetWindow
FindWindowW
EnableMenuItem
DestroyIcon
GetDlgCtrlID
CopyRect
AppendMenuA
GetTopWindow
DrawTextExW
AdjustWindowRectEx
CharNextW
CallWindowProcW

shlwapi

StrToIntW

kernel32

TlsFree
IsBadStringPtrW
MapViewOfFile
HeapUnlock
GetFileAttributesW
IsBadWritePtr
SetMailslotInfo
GetDateFormatW
lstrcpynW
GetVersionExW
GetModuleHandleA
GlobalAddAtomW
CreateNamedPipeA
GetOverlappedResult
FreeLibrary
SetThreadPriority
TransactNamedPipe
GetSystemWindowsDirectoryA
GetModuleFileNameW
WaitForSingleObject
CopyFileA
CreateNamedPipeW
HeapFree
IsDBCSLeadByte
GetFullPathNameW
SetFilePointer
GlobalUnlock
WaitForSingleObjectEx
GetLocaleInfoA
ClearCommError
SetEvent
SetFileTime
GetModuleHandleW
GetProcessHeap
HeapAlloc
WaitForMultipleObjects
GetComputerNameExW
SetCommBreak
GetVersion
GetSystemDirectoryA
SetUnhandledExceptionFilter
SystemTimeToFileTime
IsBadCodePtr
TerminateThread
FindNextFileA
EnumResourceTypesA
VerSetConditionMask
OpenFileMappingW
GlobalLock
OpenFileMappingA
LocalAlloc
GetCurrentThreadId
IsValidLocale
GetOEMCP
GetSystemWindowsDirectoryW
EnumResourceLanguagesA
CreateWaitableTimerA
GetCommandLineA

comdlg32

PrintDlgExW
ReplaceTextW
GetFileTitleW
GetOpenFileNameA
FindTextW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

Imports

msvcrt

user32

shlwapi

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 66KB

.data Size: 15KB - Virtual size: 81KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.data
Size: 15KB - Virtual size: 81KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 2KB - Virtual size: 1KB