634c4e39eeca41a9e050930a2fb0c4033a2f444e924552c71c7bcea1f1053110

Sharing

Copy URL Twitter E-mail

General

Target

634c4e39eeca41a9e050930a2fb0c4033a2f444e924552c71c7bcea1f1053110
Size

198KB
MD5

0a190396190012f3ddc2a39174ce60ba
SHA1

643c19c90d2cfda4bacf997f1f938ce26b75d641
SHA256

634c4e39eeca41a9e050930a2fb0c4033a2f444e924552c71c7bcea1f1053110
SHA512

83c266895f2cc25539d0d12bc075013ad0e536d01691e6be95a9d47829636c74107ff16de0c7d1c0209e3f8c4358d2614ddc84ec0a881254e882609b251529ab
SSDEEP

6144:q387OlG4g9Z0NFsC0yBUFJTQGjY8bjVnM:q3aOc4ggb30yBuJTQGjY8bjVn

Score

N/A

Malware Config

Signatures

Files

634c4e39eeca41a9e050930a2fb0c4033a2f444e924552c71c7bcea1f1053110
.exe windows x86

35713819839d113431191e453939f8f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIcon

shlwapi

PathIsContentTypeW

user32

OpenDesktopW
AllowSetForegroundWindow
SetCaretPos
LoadStringA
GetActiveWindow
GetKeyboardType
wvsprintfA
DialogBoxParamA
LoadIconA
DialogBoxIndirectParamW
GetForegroundWindow
GetClassInfoA
AttachThreadInput
SetWindowTextA
IsCharUpperA
GetWindowTextA
InsertMenuItemW
GetScrollPos
GetWindowPlacement
DestroyWindow
GetClipCursor
CharPrevW
ClientToScreen
FillRect
HiliteMenuItem
CreateDialogParamW
CreateAcceleratorTableW
InvalidateRect
LoadMenuA
SetDlgItemTextW
CharUpperA
GetIconInfo
WaitMessage
GetTopWindow
DefDlgProcW
OpenIcon
GetMessageW
ModifyMenuW
ArrangeIconicWindows
DragObject
SetTimer
CreateMenu
GetKeyboardLayout
CreateIconFromResource
LoadAcceleratorsW
CreateCaret
WindowFromPoint
SendMessageTimeoutW
MapDialogRect
GetDlgItemTextW
GetWindowLongW
SetDlgItemInt

gdi32

CreateBrushIndirect
GetLayout
SelectPalette
GetPaletteEntries
GetROP2
CreateDiscardableBitmap
SetBkMode
GetBitmapBits
SetMapMode
GetTextColor
GetWindowOrgEx
OffsetViewportOrgEx
TextOutA
CreateBitmap
CreatePalette
CreatePolygonRgn
ExtTextOutW
PolyBezier
GetMapMode
SelectObject
SetStretchBltMode
SetRectRgn
GetViewportOrgEx

kernel32

GetPriorityClass
FindFirstChangeNotificationW
GetLongPathNameW
GlobalHandle
AddAtomW
FlushFileBuffers
SetEvent
CancelIo
WaitForMultipleObjectsEx
HeapSize
VerifyVersionInfoW
FlushViewOfFile
lstrcmpW
GetACP
EscapeCommFunction
GetModuleFileNameA
SetThreadLocale
ResumeThread
FindFirstFileA
ConvertDefaultLocale
IsBadReadPtr
FindCloseChangeNotification
LoadResource
MoveFileExA
VerSetConditionMask
SetFileApisToOEM
SetFileTime
lstrcmpiA
EnumSystemLocalesA
FindResourceExA
GetWindowsDirectoryW
GetTickCount
FindNextFileW
GetFileAttributesExW
CreateSemaphoreA
GetVersionExA
GlobalAddAtomA
FoldStringW
IsBadStringPtrW
MoveFileA
GetStartupInfoA
GetOverlappedResult
SetSystemTimeAdjustment
EnumResourceNamesA
GlobalMemoryStatus
RaiseException
RemoveDirectoryW
ConnectNamedPipe

Exports

Exports

IsValidScreenA
OnHeaderNew
RtlFullNameNew
InsertValueW
RtlAnchor
FullNameExA
SendScreenEx
CloseMutantW
OnMonitor
AppNameOld
FormatCharOld
RtlFunctionEx
GenerateDataOld
FindDataA
PutMediaType
KillRectOld
ValidateVersion
CancelFolderPathOriginal
LoadClassA
IsNotHeight
CallObjectEx
InsertWindowOld
FormatDeviceOld
FindFolderExA
IncrementMutexExA
IsValidEventOld
LoadNameOld
ModifySizeOld
InstallWindowInfoNew
RtlConfigEx
CopyListOld
ValidateExpressionW

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35713819839d113431191e453939f8f2

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.On59 Size: 3KB - Virtual size: 2KB

.Re82 Size: 22KB - Virtual size: 25KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 512B - Virtual size: 450B

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 160KB - Virtual size: 160KB

.On59
Size: 3KB - Virtual size: 2KB

.Re82
Size: 22KB - Virtual size: 25KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 512B - Virtual size: 450B

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB