da7bfe20368f429b97a1abf77af2ad6b58c2c6c902627af3ad01d15f1e1d78b8

Sharing

Copy URL

Twitter E-mail

General

Target

da7bfe20368f429b97a1abf77af2ad6b58c2c6c902627af3ad01d15f1e1d78b8
Size

406KB
MD5

84ec7034e42349ab2c05c2fa2dbc5ee0
SHA1

f8408c8090e70a2c3f17edd1b89549f7d4163ffe
SHA256

da7bfe20368f429b97a1abf77af2ad6b58c2c6c902627af3ad01d15f1e1d78b8
SHA512

ba3ee0713a2e1d48fb7cece7968ab2fd300acecbb026b0bd1340a5828cfd27b8c1f9643705641bb909f84aa284ee13a810ee1720a3c783782ddb2f65588afd9c
SSDEEP

6144:AHN8rlfvkarUr9+9EJgmTYUla1t7wLsziwlLgBCHgfsAONP:JrlfvkCCFYUlg20hxtAOR

Score

N/A

Malware Config

Signatures

Files

da7bfe20368f429b97a1abf77af2ad6b58c2c6c902627af3ad01d15f1e1d78b8
.exe windows x86

8d44fb163e725df3a993bbbd87f1ce53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

LocalFileTimeToFileTime
SystemTimeToFileTime
GetLastError
SetStdHandle
WriteConsoleW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetUserDefaultLCID
LoadLibraryW
HeapSize
Sleep
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetDateFormatA
GetLocalTime
CreateMutexA
InterlockedExchange
CloseHandle
GetVolumeInformationA
HeapCreate
LocalFree
HeapAlloc
FormatMessageA
OutputDebugStringA
GetVolumePathNamesForVolumeNameW
WaitForSingleObject
GetExitCodeProcess
HeapReAlloc
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
CreateFileW
GetModuleFileNameW
GetStdHandle
WriteFile
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess

user32

AppendMenuA
CreatePopupMenu
GetDC
PostMessageA
EnableMenuItem
PostQuitMessage
BeginPaint
wsprintfA
AdjustWindowRect
DrawMenuBar
CreateWindowExA
SendMessageA
DdeInitializeA
DefMDIChildProcA
DefWindowProcA
EndDialog
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
GetDlgItem
EnableWindow
GetLayeredWindowAttributes

gdi32

GetDeviceCaps
CreateFontA
TextOutA
DeleteObject
RestoreDC
GetTextExtentPoint32A
CreateBitmap
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesA
CreateFontIndirectW
SelectObject
SaveDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetMalloc

ole32

OleInitialize
OleGetClipboard
CoInitialize
CoCreateInstance

netapi32

NetWkstaUserGetInfo

shlwapi

ord12
StrDupA

secur32

GetUserNameExA

uxtheme

GetThemeSysFont

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gave
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d44fb163e725df3a993bbbd87f1ce53

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

netapi32

shlwapi

secur32

uxtheme

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 230KB - Virtual size: 229KB

.data Size: 5KB - Virtual size: 12KB

.gave Size: 17KB - Virtual size: 17KB

.rsrc Size: 87KB - Virtual size: 86KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 230KB - Virtual size: 229KB

.data
Size: 5KB - Virtual size: 12KB

.gave
Size: 17KB - Virtual size: 17KB

.rsrc
Size: 87KB - Virtual size: 86KB

.reloc
Size: 7KB - Virtual size: 7KB