190e6747da111b0fc62af6f40b0c9982351b05589d5517c093556ab2a11dec3a

Sharing

Copy URL Twitter E-mail

General

Target

190e6747da111b0fc62af6f40b0c9982351b05589d5517c093556ab2a11dec3a
Size

8.4MB
MD5

bd4a776e0656fa38361c49d54d1b6a3e
SHA1

0eb348055717c1d5a63a9c9c8ef605152e435bc8
SHA256

190e6747da111b0fc62af6f40b0c9982351b05589d5517c093556ab2a11dec3a
SHA512

9b912b07b206afa822f41fcb5274b547bc133db9b69930ccea08ea81ebd441c84d480828f85448cc28f65dbe5086b1010963891221b1240b38aa5331b629bd12
SSDEEP

196608:KZA3tWq0X8WG0aaGONTFNQeh5jgeRtoOVkSTqJ/EDi:AAUqS8WCUmGVTbbPTqVEDi

Score

N/A

Malware Config

Signatures

Files

190e6747da111b0fc62af6f40b0c9982351b05589d5517c093556ab2a11dec3a
.exe windows x86

07165dd2222a2ca3dd82cacbca7cb283

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysFreeString
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

user32

MessageBoxA
CharNextW
CreateWindowExW
WaitMessage
ValidateRect
TranslateMessage
ShowWindow
SetWindowPos
SetWindowContextHelpId
SetTimer
SetScrollInfo
SetParent
SetForegroundWindow
SetFocus
SetCursor
SetCapture
SendMessageW
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassW
PostQuitMessage
OffsetRect
OemToCharA
MoveWindow
MessageBoxW
KillTimer
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
InvalidateRect
GetWindowTextW
GetWindowRgn
GetWindowRect
GetWindowContextHelpId
GetUpdateRgn
GetSystemMetrics
GetSystemMenu
GetSysColor
GetScrollPos
GetScrollInfo
GetParent
GetWindow
GetMenuContextHelpId
GetKeyState
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClientRect
GetClassInfoW
GetCapture
GetAsyncKeyState
FillRect
EndPaint
EnableWindow
EnableMenuItem
DrawTextW
DrawIcon
DestroyWindow
DestroyIcon
DeleteMenu
DefWindowProcW
CopyImage
ClientToScreen
CharLowerBuffW
BeginPaint
wvsprintfW
WinHelpW
SetWindowLongW
SetPropW
SendMessageW
RemovePropW
PostMessageW
PeekMessageW
MessageBoxW
LoadStringW
LoadImageW
LoadIconW
LoadCursorW
GetWindowTextLengthW
GetWindowLongW
GetPropW
GetClassLongW
GetClassInfoW
DrawTextW
DispatchMessageW
DefWindowProcW
CallWindowProcW

kernel32

lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WaitForSingleObject
VirtualQuery
UnmapViewOfFile
TerminateThread
SizeofResource
SetFileTime
SetFilePointer
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ReadFile
MultiByteToWideChar
MapViewOfFile
LocalFileTimeToFileTime
LoadResource
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetVersionExW
GetVersion
GetProcAddress
GetModuleHandleW
GetLastError
GetFullPathNameW
GetFileSize
GetExitCodeThread
FreeLibrary
FindFirstFileExW
DosDateTimeToFileTime
DeleteFileW
CreateThread
CreateFileW
CloseHandle
SetFileAttributesW
LoadLibraryW
GetVersionExW
GetTempPathW
GetTempFileNameW
GetModuleFileNameW
GetFullPathNameW
GetFileAttributesW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
GetCommandLineW
FormatMessageW
FindResourceW
FindNextFileW
DeleteFileW
CreateFileMappingW
CreateFileW
CreateDirectoryW
CompareStringW

gdi32

StretchDIBits
StretchBlt
SetWindowOrgEx
SetTextColor
SetRectRgn
SetROP2
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
SaveDC
RestoreDC
OffsetRgn
MoveToEx
IntersectClipRect
GetStockObject
ExtSelectClipRgn
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CombineRgn
BitBlt
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW

ole32

CoTaskMemFree
OleInitialize
CoTaskMemFree

comctl32

ImageList_GetIcon
InitCommonControls

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHGetFolderLocation
SHGetPathFromIDListW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shfolder

SHGetFolderPathW

shlwapi

PathCanonicalizeW

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07165dd2222a2ca3dd82cacbca7cb283

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

ole32

comctl32

shell32

version

shfolder

shlwapi

Sections

.text Size: 147KB - Virtual size: 147KB

.itext Size: 512B - Virtual size: 496B

.data Size: 16KB - Virtual size: 16KB

.bss Size: - Virtual size: 11KB

.idata Size: 7KB - Virtual size: 6KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.rsrc Size: 41KB - Virtual size: 41KB

.text
Size: 147KB - Virtual size: 147KB

.itext
Size: 512B - Virtual size: 496B

.data
Size: 16KB - Virtual size: 16KB

.bss
Size: - Virtual size: 11KB

.idata
Size: 7KB - Virtual size: 6KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.rsrc
Size: 41KB - Virtual size: 41KB