89c7597dccbdb9d88cbf08b7f3f8a0670118fde0567161028759f3a6487124ef

Sharing

Copy URL Twitter E-mail

General

Target

89c7597dccbdb9d88cbf08b7f3f8a0670118fde0567161028759f3a6487124ef
Size

691KB
MD5

93310602898f8c63305342868a6be8b0
SHA1

70b7abc6a5a80179ebe8ac93f716479e568a7589
SHA256

89c7597dccbdb9d88cbf08b7f3f8a0670118fde0567161028759f3a6487124ef
SHA512

3b41fc90f7e960aad20fef0e1bfd56d955ab486654936378a451b190d81cdf617f2d7e4daf696758236c695a52d95254f837e295852542586baa729d6f10bd65
SSDEEP

12288:6bo4W4kWNHcM1KRKQdUI45QE5qM6UHrbGUUYTPGlse8bXnft:6bocLtKRKQdUI45QE5qPOrbGUUYTPc6

Score

N/A

Malware Config

Signatures

Files

89c7597dccbdb9d88cbf08b7f3f8a0670118fde0567161028759f3a6487124ef
.exe windows x86

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
SizeofResource
FreeResource
GlobalUnlock
LockResource
GlobalLock
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
MulDiv
InterlockedDecrement
InterlockedIncrement
GetFileSize
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
SetEndOfFile
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrlenW
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetFullPathNameW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetLastError
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
ResetEvent
SetEvent
CreateEventW
CloseHandle
GetModuleHandleW
WinExec
CreateProcessW
Sleep
GetConsoleCP
GetModuleFileNameW

user32

GetSysColor
ClientToScreen
ShowCaret
CreateCaret
CreateAcceleratorTableW
SetCaretPos
HideCaret
InvalidateRgn
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyAcceleratorTable
KillTimer
ShowWindow
RedrawWindow
MoveWindow
OffsetRect
FillRect
DrawTextW
GetParent
GetActiveWindow
GetWindowRect
SystemParametersInfoW
IsZoomed
GetWindowTextW
GetWindowTextLengthW
SetTimer
DrawIconEx
CharPrevW
CharNextW
SetCursor
IntersectRect
IsRectEmpty
CallWindowProcW
DefWindowProcW
LoadImageW
RegisterClassW
SetPropW
EnableWindow
DestroyIcon
RegisterClassExW
GetPropW
LoadCursorW
GetClassInfoExW
LoadBitmapW
CharNextA
LoadStringW
GetMessageW
InvalidateRect
MonitorFromWindow
DispatchMessageW
UpdateLayeredWindow
GetUpdateRect
SetWindowRgn
IsIconic
GetDC
TranslateMessage
IsWindow
SendMessageW
GetFocus
SetFocus
IsChild
SetCapture
ScreenToClient
GetMonitorInfoW
PostMessageW
BeginPaint
CreateWindowExW
PtInRect
EndPaint
GetCursorPos
DestroyWindow
GetKeyState
ReleaseDC
ReleaseCapture
GetClientRect
GetWindow
MapWindowPoints
SetWindowTextW

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreatePen
SelectObject
CombineRgn
BitBlt
GetTextMetricsW
CreateRectRgn
DeleteObject
SetBitmapBits
SelectClipRgn
SetTextColor
RoundRect
GetCharABCWidthsW
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
CreateRoundRectRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
TextOutW
SetStretchBltMode
GetDeviceCaps
CreateCompatibleBitmap
GetBitmapBits
Rectangle

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

SysAllocString
OleLoadPicture
SysFreeString

wininet

InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetSetOptionW
InternetCloseHandle

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 468KB - Virtual size: 466KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 468KB - Virtual size: 466KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 64KB - Virtual size: 60KB