068c8b14c313555796f85ba719b78bdeefcb5a7bafb2ef631938dd0c6f478f40

Sharing

Copy URL

Twitter E-mail

General

Target

068c8b14c313555796f85ba719b78bdeefcb5a7bafb2ef631938dd0c6f478f40
Size

196KB
MD5

dad5da02e77b7dafbb897cb3f231aeba
SHA1

2b9525120c7141151e19b2d2a00c84ae9c3b33f5
SHA256

068c8b14c313555796f85ba719b78bdeefcb5a7bafb2ef631938dd0c6f478f40
SHA512

42482e757a550cf54f67c50fbd85a854350724a4465a7d16076e02d9ca54e2b006b5dba3971a21e1aefe4c9b41caa6031b6b5662b43b3268be8c0438053cb861
SSDEEP

1536:ZVLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNyyriH4wkfdQcGAN28KD+YzGJQ:OvyrfbfWEPzU7fNSa2+eiH43fpZKfV

Score

N/A

Malware Config

Signatures

Files

068c8b14c313555796f85ba719b78bdeefcb5a7bafb2ef631938dd0c6f478f40
.exe windows x86

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrcatW
VirtualAlloc
HeapAlloc
GetProcessHeap
_lclose
WideCharToMultiByte
WaitForSingleObject
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrlenW
CloseHandle

user32

UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperA
CharNextA
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
UnhookWindowsHook
TranslateMessage
TranslateAcceleratorW
SystemParametersInfoW
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsZoomed

gdi32

DeleteMetaFile
DeleteObject
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
LineTo
CreatePatternBrush
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
StretchDIBits
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
CreateSolidBrush
RestoreDC
CloseMetaFile
CreatePalette
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePen

advapi32

RegQueryValueExW
RegOpenKeyExA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW

winmm

timeGetTime

msvcrt

memset
memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a0
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dba2dfe8ff406005cbc83a2bb388d802

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 1024B - Virtual size: 1020B

.a0 Size: 20KB - Virtual size: 19KB

.rsrc Size: 39KB - Virtual size: 39KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 1024B - Virtual size: 1020B

.a0
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 39KB - Virtual size: 39KB