655f1b792451e081789b399cd86d925cf8aadadf84c861b00fd8dd7fa72551ff

Sharing

Copy URL Twitter E-mail

General

Target

655f1b792451e081789b399cd86d925cf8aadadf84c861b00fd8dd7fa72551ff
Size

541KB
MD5

babe25c5cc8ddc804c603e061ddbaa47
SHA1

91f62ed46e5d1a50f18c73dea228f2235e940c25
SHA256

655f1b792451e081789b399cd86d925cf8aadadf84c861b00fd8dd7fa72551ff
SHA512

75525ff596992198a392b1c6c3b13960e1075eaa2c883655065d031fa41f70f364a677dd58f58fa94af334746d7d48090cf868d1175bb1518b449dee5764279c
SSDEEP

12288:2bV5rYdOU4vwFZ10J25qwvG5IZxSi11kAl4kpoTTYV3OHM8AGOAJxay5WA8PgHBr:2bb4v4vMZ10A8wvGCZci11kAl4kpoTTT

Score

N/A

Malware Config

Signatures

Files

655f1b792451e081789b399cd86d925cf8aadadf84c861b00fd8dd7fa72551ff
.exe windows x86

4f3f1ad208d03d9194411eac75cee3aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
VkKeyScanExW
InSendMessage
RegisterClassExA
RegisterClassA
GetKeyNameTextW
ModifyMenuW
GetCaretBlinkTime
SetWindowTextA
GetDlgItem

shell32

SHGetDataFromIDListW

comctl32

InitCommonControlsEx

kernel32

GetEnvironmentStringsW
OpenMutexA
HeapFree
CompareStringW
CreateDirectoryW
WriteFile
TlsSetValue
GetTickCount
FreeEnvironmentStringsW
LoadLibraryA
ExitProcess
GlobalAddAtomW
SetVolumeLabelW
CompareStringA
GetModuleFileNameA
DeleteCriticalSection
VirtualQuery
SetHandleCount
MoveFileExA
GetCurrentProcessId
CreateFileMappingW
GetLogicalDriveStringsW
InitializeCriticalSection
VirtualAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
LCMapStringA
GetOEMCP
CreateProcessA
InterlockedIncrement
GetACP
HeapCreate
TlsFree
MultiByteToWideChar
LeaveCriticalSection
SetFilePointer
WritePrivateProfileStringA
VirtualFree
CreateMutexA
WriteProfileStringW
EnterCriticalSection
GetStringTypeA
GetProcessHeaps
GetAtomNameA
CloseHandle
GetSystemTime
FreeEnvironmentStringsA
GetPrivateProfileSectionNamesA
GetCurrentThreadId
UnhandledExceptionFilter
TlsAlloc
GetCommandLineA
GetEnvironmentStrings
EnumCalendarInfoExW
FormatMessageW
SetEnvironmentVariableW
WideCharToMultiByte
EnumDateFormatsExA
GetCurrentThread
HeapAlloc
GetModuleHandleA
GetCPInfo
SetLastError
QueryPerformanceCounter
IsBadWritePtr
InterlockedDecrement
SetTimeZoneInformation
OpenSemaphoreA
LCMapStringW
SetConsoleTitleA
TlsGetValue
GetLocalTime
SetStdHandle
HeapReAlloc
GetFullPathNameA
RtlUnwind
TerminateProcess
ReadFile
GetLastError
GetCurrentProcess
GetFileType
GetVersion
GetProcAddress
GetStringTypeW
GetStartupInfoA
SetEnvironmentVariableA
FlushFileBuffers
GetStdHandle
InterlockedExchange
FindFirstFileExA
HeapDestroy
CreateMutexW

wininet

LoadUrlCacheContent
FtpRenameFileW
SetUrlCacheEntryGroupA
InternetQueryOptionW
CreateUrlCacheContainerA
FtpGetCurrentDirectoryW

gdi32

GetBkMode
SetWindowOrgEx
GetWindowExtEx
SetMagicColors
PolyTextOutA
GetSystemPaletteUse
GetLogColorSpaceW
ResetDCA
AbortPath
LPtoDP
DeviceCapabilitiesExA
SetICMMode
ColorMatchToTarget
GetTextColor
PolyDraw
GdiPlayScript
EnumFontFamiliesExW
SetFontEnumeration
SetArcDirection
SelectClipPath
CreatePatternBrush
CreateBrushIndirect

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f3f1ad208d03d9194411eac75cee3aa

Headers

File Characteristics

Imports

user32

shell32

comctl32

kernel32

wininet

gdi32

Sections

.text Size: 168KB - Virtual size: 168KB

.rdata Size: 5KB - Virtual size: 25KB

.data Size: 358KB - Virtual size: 358KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 168KB - Virtual size: 168KB

.rdata
Size: 5KB - Virtual size: 25KB

.data
Size: 358KB - Virtual size: 358KB

.rsrc
Size: 8KB - Virtual size: 8KB