5bf4254212080d5434125bbfd06d336aca92564311ec132c4582fc7535bbc20f

Sharing

Copy URL Twitter E-mail

General

Target

5bf4254212080d5434125bbfd06d336aca92564311ec132c4582fc7535bbc20f
Size

296KB
MD5

847f2886eb1367ad75503f54b0105d20
SHA1

4b8e43d54fd83c1b5e08cafdee8cb15c42264699
SHA256

5bf4254212080d5434125bbfd06d336aca92564311ec132c4582fc7535bbc20f
SHA512

a152601943d7a3f1af6a19bfaa4311704e7bac4f171d5092d99e026ceb59c0a89e6e5543e61da92765a7cfb7f3d73be4e52c2f3891017bfdb3970d3798e485a3
SSDEEP

3072:ox58Sy/OMz2s48JVaQSca4kAKQ+ru4yCqFcH:w50/pzDaQScadvyCqC

Score

N/A

Malware Config

Signatures

Files

5bf4254212080d5434125bbfd06d336aca92564311ec132c4582fc7535bbc20f
.exe windows x86

a6badfeafca2785aa03d4097856c458b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
DefDlgProcA
GetDlgCtrlID
GetSysColor
LoadIconA
SetTimer
ShowWindow
SetForegroundWindow
SetWindowPos
GetDesktopWindow
GetWindowRect
MoveWindow
SendMessageA
GetForegroundWindow
MessageBoxExA
FindWindowA
GetIconInfo
GetClassLongW
GetMenuState
wsprintfW
RegisterClipboardFormatA
SetRect
LoadCursorA
SetScrollRange

comdlg32

GetSaveFileNameA

advapi32

RegEnumValueA

gdi32

GetRandomRgn
GetColorSpace
PolylineTo
TranslateCharsetInfo
GetTextFaceA
GetClipRgn
GetNearestColor
GetPaletteEntries
RealizePalette
SetDIBitsToDevice

comctl32

InitCommonControlsEx

kernel32

HeapSize
RtlUnwind
CreateProcessA
CompareStringW
GetExitCodeProcess
HeapReAlloc
HeapAlloc
GetLocaleInfoA
SetEnvironmentVariableA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
WaitForSingleObject
CompareStringA
CloseHandle
GetModuleFileNameA
GetCurrentProcessId
DecodePointer
GetLogicalDrives
LocalAlloc
IsBadReadPtr
lstrcpynW
FlushInstructionCache
VirtualQuery
SetStdHandle
GetExitCodeThread
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetLastError
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapFree
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6badfeafca2785aa03d4097856c458b

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

advapi32

gdi32

comctl32

kernel32

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 149KB - Virtual size: 148KB

.data Size: 22KB - Virtual size: 41KB

.rsrc Size: 55KB - Virtual size: 54KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 149KB - Virtual size: 148KB

.data
Size: 22KB - Virtual size: 41KB

.rsrc
Size: 55KB - Virtual size: 54KB