005e80cfd320e4a7393f10bbf83270b2675fd408b089b21f5d30a78872258aec

Sharing

Copy URL Twitter E-mail

General

Target

005e80cfd320e4a7393f10bbf83270b2675fd408b089b21f5d30a78872258aec
Size

88KB
MD5

a38685e750e54e36288ab7532c347c1b
SHA1

0aa8902dd279efc101cb50b5059248e6df6f578e
SHA256

005e80cfd320e4a7393f10bbf83270b2675fd408b089b21f5d30a78872258aec
SHA512

30fa8d1823096dbb75ae6f145d1065776284500372fec1f706b2f3b6aeeaf4b1c6a92c3e48dc40c9da9221b622d3bd44e8a838fc5f1e16e8497f2fc0fac83d41
SSDEEP

1536:L6fnMer22Cbu/Jq57PJ7/8xBQn4HJFdC4NPM7utESSe1vF238E+3xv6J2p3QmbHJ:L6vMeKbu/Jq57B7/sBKwFI4NU7utESSs

Score

N/A

Malware Config

Signatures

Files

005e80cfd320e4a7393f10bbf83270b2675fd408b089b21f5d30a78872258aec
.exe windows x86

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetVersionExA
GetStartupInfoA
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
MultiByteToWideChar
GetCommandLineA
HeapSize
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryW
lstrcatW
FindResourceW
GetProcAddress
LoadResource
LockResource
FreeResource
GetVersionExW
GetSystemDirectoryW
ExpandEnvironmentStringsW
lstrcmpW
GetModuleFileNameW
GetFullPathNameW
GetSystemDefaultLangID
HeapReAlloc
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
lstrlenW
lstrcmpiW
GetFileSize
ReadFile
FreeLibrary
GetWindowsDirectoryW
CreateFileW
SetFilePointer
LockFile
WriteFile
UnlockFile
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
Sleep

gdi32

GetStockObject
SelectObject
CreateFontIndirectW
GetDeviceCaps
DeleteDC
DeleteObject
BitBlt
GetTextExtentPoint32W
TextOutW
SetTextAlign
SetBkMode
GetObjectW
SetBkColor
LineDDA
SetPixel
SetTextColor
ExtTextOutW
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextMetricsW

user32

EndPaint
DrawEdge
GetSysColor
BeginPaint
PostMessageW
EnableWindow
GetDlgItem
PostQuitMessage
DestroyWindow
FrameRect
MessageBeep
FillRect
GetSysColorBrush
ScreenToClient
GetWindowRect
UnregisterClassW
GetClassInfoExW
SetFocus
SetWindowPos
GetKeyState
GetDlgItemTextW
EndDialog
DialogBoxParamW
SetWindowTextA
CreateWindowExA
SendMessageA
GetWindow
GetParent
GetWindowLongW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
BringWindowToTop
IsIconic
GetClassNameW
CreateWindowExW
RegisterClassExW
LoadCursorW
SetWindowLongW
ChildWindowFromPoint
SetWindowTextW
GetClientRect
ActivateKeyboardLayout
LoadMenuW
LoadImageW
LoadIconW
GetSystemMetrics
EnumWindows
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
LoadStringW
RedrawWindow
SetRect
ScrollWindow
UpdateWindow
GetDC
ReleaseDC
SetScrollInfo
wsprintfW
SendMessageW
ShowWindow
InvalidateRect

comdlg32

GetSaveFileNameW
GetOpenFileNameW

imm32

ImmAssociateContext
ImmGetContext
ImmNotifyIME
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmGetIMEFileNameW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a535282d93ca83f67a1638149224586c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comdlg32

imm32

Sections

.text Size: 56KB - Virtual size: 56KB

.data Size: 2KB - Virtual size: 6KB

.rsrc Size: 8KB - Virtual size: 8KB

.rdata Size: 20KB - Virtual size: 20KB

.text
Size: 56KB - Virtual size: 56KB

.data
Size: 2KB - Virtual size: 6KB

.rsrc
Size: 8KB - Virtual size: 8KB

.rdata
Size: 20KB - Virtual size: 20KB