f64a36114afbbf001dfe610740329c25d055c814674195e596eadbed46da189a

Sharing

Copy URL Twitter E-mail

General

Target

f64a36114afbbf001dfe610740329c25d055c814674195e596eadbed46da189a
Size

348KB
MD5

81a3407021e9ca38d1e4501e80f252b1
SHA1

b0f5e4da07e798ea6204731ed96de43cb8cb8f45
SHA256

f64a36114afbbf001dfe610740329c25d055c814674195e596eadbed46da189a
SHA512

c41b205e588e955b6eca4b15d2463e6a97e5187947a06145af091bc197a198199949179c8ad79e7121187da1474e9c8a29d636ac168c46808c693d4160525ba8
SSDEEP

6144:dT8vqhfb9SFohdZzUnnS7jZdH6UyktOhYzFrCZTx1E5:dTIWfb9SKUnSv/frOaCZU5

Score

N/A

Malware Config

Signatures

Files

f64a36114afbbf001dfe610740329c25d055c814674195e596eadbed46da189a
.exe windows x86

5bb76c9b862d3d66ddbf9ae1fa74b496

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sensapi

IsNetworkAlive

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedDecrement
GetFileTime
WaitForSingleObject
lstrlenA
InterlockedIncrement
lstrcmpiA
lstrcpyA
GetModuleHandleA
GetModuleFileNameA
lstrcpynA
IsDBCSLeadByte
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
Sleep
CreateThread
CreateEventA
lstrcatA
SetEvent
ExitProcess
GetTickCount
FreeLibrary
LoadLibraryExA
GetCommandLineA
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetProcAddress
LoadLibraryA
SetFilePointer
CreateDirectoryA
GetTempPathA
MoveFileExA
GetTempFileNameA
SetEnvironmentVariableA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
lstrcmpA
ReleaseMutex
ResetEvent
CreateMutexA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
CloseHandle
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCPInfo
GetOEMCP
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetDateFormatA
GetTimeFormatA
RtlUnwind
LocalFree
HeapSize
HeapReAlloc
HeapDestroy
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WriteFile
MulDiv

user32

SetWindowPos
MsgWaitForMultipleObjects
PeekMessageA
GetWindowTextLengthA
GetWindowTextA
ShowWindow
CharUpperA
LoadIconA
CharNextA
SendMessageA
UnregisterClassA
DestroyWindow
PostThreadMessageA
DefWindowProcA
LoadCursorA
SetWindowTextA
GetWindow
SetWindowLongA
IsWindow
GetClassInfoExA
CreateAcceleratorTableA
GetParent
GetClassNameA
RedrawWindow
DestroyAcceleratorTable
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindowLongA
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
GetMessageA
DispatchMessageA
TranslateMessage
KillTimer
RegisterWindowMessageA
PostQuitMessage
CreateWindowExA
RegisterClassExA
CallWindowProcA
wsprintfA

gdi32

SelectObject
DeleteObject
CreateCompatibleDC
BitBlt
GetDeviceCaps
GetObjectA
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
DeleteDC

advapi32

RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

ord165
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetFileInfoA
ShellExecuteExA
SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal
OleLockRunning
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemAlloc
CoCreateGuid
CoTaskMemRealloc
CoInitialize
CoUninitialize
StringFromGUID2
CoInitializeEx
OleUninitialize
OleInitialize
CoGetClassObject

oleaut32

SysStringByteLen
RegisterTypeLi
DispCallFunc
VarBstrCat
OleCreateFontIndirect
GetErrorInfo
SysFreeString
UnRegisterTypeLi
VariantChangeType
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysAllocString
SysAllocStringByteLen
SafeArrayCopy
SafeArrayDestroy
SysAllocStringLen
VariantCopy
VariantClear
SafeArrayUnlock
SafeArrayLock
VariantInit
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrCmp
SysStringLen

shlwapi

PathFindFileNameA
StrStrW
PathFindExtensionA
PathIsURLW
StrToIntW
SHGetValueA
PathRenameExtensionA
PathAppendA

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5bb76c9b862d3d66ddbf9ae1fa74b496

Headers

File Characteristics

Imports

sensapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 204KB - Virtual size: 202KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 204KB - Virtual size: 202KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 88KB - Virtual size: 88KB