d7a8f2999892e037144375d4c088ff4b493e0631329aa5a174a708e857f9811d

Sharing

Copy URL Twitter E-mail

General

Target

d7a8f2999892e037144375d4c088ff4b493e0631329aa5a174a708e857f9811d
Size

305KB
MD5

a35b03850b5b67bb3ad6d4d97ea2846d
SHA1

14eb2d29c2ba4e7777a7cc0849d925f177269af1
SHA256

d7a8f2999892e037144375d4c088ff4b493e0631329aa5a174a708e857f9811d
SHA512

a8b10db6ec388edfeb9ed938b4ef54ac1afdfdc07ae6a44724a3027a1d3655be3cebd3df3b010d99706ef94e89610f64bdfd166a83c1ef00c6048489229c22f0
SSDEEP

6144:1tzPGhAYk5FZ+kE//35FhmesWkSLTZx/eMzTr:XRFQZ//JFh6GXZRzTr

Score

N/A

Malware Config

Signatures

Files

d7a8f2999892e037144375d4c088ff4b493e0631329aa5a174a708e857f9811d
.exe windows x86

fd259e56f70ea5f9404950ed86063495

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetParent
LoadMenuA
IsDialogMessageW
GetProcessWindowStation
GrayStringW
IsWindowVisible
GetThreadDesktop
CallWindowProcW
wvsprintfW
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
CheckRadioButton
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
DrawStateA
SetClassLongA
DdeQueryStringW
ReleaseCapture
SetRectEmpty

shell32

SHGetMalloc
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegEnumValueW
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW

gdi32

SetTextAlign
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
DeleteObject
SetBkColor
CreateBrushIndirect
GetDeviceCaps

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
WriteFile
ExitProcess
Sleep
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
GetStdHandle
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
GetLastError
UnregisterWait
CreateWaitableTimerW
MulDiv
GetTapeParameters
OpenFileMappingW
ProcessIdToSessionId
GetLocaleInfoW
PeekNamedPipe
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
ReadFile
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetHandleCount
LockResource
LCMapStringW
CreateSemaphoreW
EnumResourceNamesW
GlobalLock
GetOverlappedResult

Sections

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aa
Size: 151KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd259e56f70ea5f9404950ed86063495

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

version

kernel32

Sections

.rdata Size: 24KB - Virtual size: 24KB

.aa Size: 151KB - Virtual size: 250KB

.rsrc Size: 128KB - Virtual size: 127KB

.rdata
Size: 24KB - Virtual size: 24KB

.aa
Size: 151KB - Virtual size: 250KB

.rsrc
Size: 128KB - Virtual size: 127KB