644df73195d313b67ebd14450f15332bbc32e471f4bade67351990d55a8cf832

Sharing

Copy URL Twitter E-mail

General

Target

644df73195d313b67ebd14450f15332bbc32e471f4bade67351990d55a8cf832
Size

300KB
MD5

a35215aa49d53cb99f3037a7ff7e0331
SHA1

36df38bfd0a451d3a79848c4a388c1b300df1d4d
SHA256

644df73195d313b67ebd14450f15332bbc32e471f4bade67351990d55a8cf832
SHA512

8986c29fe4f2204ef207513a5530b6d092e1cf73f32f99d164942576ff62ff34d7e391ce6012284f72d916c1275997ba4bf5e4b2074a57e805e98ae32957ea75
SSDEEP

6144:hzCIWRWPsFZ+kP6tji4WzsxfuR1+6cE7icJANt8H:h8xFQW6tpssx4iUmtI

Score

N/A

Malware Config

Signatures

Files

644df73195d313b67ebd14450f15332bbc32e471f4bade67351990d55a8cf832
.exe windows x86

5e07a9b287ba2184c6cd39e86d5dfb4f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
CharToOemBuffW
IsMenu
MessageBoxIndirectA
CharUpperW
IsWindowVisible
InsertMenuItemA
GetWindowTextA
CharPrevW
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CheckRadioButton
wvsprintfW
DispatchMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
PeekMessageW
UpdateWindow
GetCapture
FlashWindowEx

shell32

SHGetMalloc
SHFileOperationW
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegEnumValueW
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW

gdi32

SetTextAlign
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
DeleteObject
GetDeviceCaps
SetBkColor
CreateBrushIndirect

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

RtlUnwind
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
WriteFile
ExitProcess
Sleep
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
LoadLibraryA
GetFileType
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
GetLastError
ReadProcessMemory
GetAtomNameA
SetSystemTime
SetInformationJobObject
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
ReadFile
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteCriticalSection
LoadLibraryExW
GetBinaryTypeA
DeleteTimerQueueTimer
IsValidLanguageGroup
GlobalLock
GetOverlappedResult
EnumResourceNamesW
CreateSemaphoreW
LCMapStringW
LockResource
PeekNamedPipe

Sections

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aa
Size: 152KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e07a9b287ba2184c6cd39e86d5dfb4f

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

comctl32

version

kernel32

Sections

.rdata Size: 24KB - Virtual size: 24KB

.aa Size: 152KB - Virtual size: 251KB

.rsrc Size: 122KB - Virtual size: 122KB

.rdata
Size: 24KB - Virtual size: 24KB

.aa
Size: 152KB - Virtual size: 251KB

.rsrc
Size: 122KB - Virtual size: 122KB