a569990c1cd339c1b2c7454c9e39edec86463d71f198464b0c08216393e5e636

Sharing

Copy URL Twitter E-mail

General

Target

a569990c1cd339c1b2c7454c9e39edec86463d71f198464b0c08216393e5e636
Size

310KB
MD5

82d0c41c3ce3deeee35bbb19d30ea050
SHA1

a6ee4f43f1f35d618093341dafa8c813636240bc
SHA256

a569990c1cd339c1b2c7454c9e39edec86463d71f198464b0c08216393e5e636
SHA512

958e0fb4e3c072787c31771e794a1b3a5ba6ad541f02c0a97b352de86c0a43c3c98d80c450768ad5b125a76c8b58daddd7afcaf06d512d8378cec6c9a21964d7
SSDEEP

6144:21pbfH68w+1lBNCSrVZHL9boFoS+bqwVp9e7i1SY+VcC3K8b0o+:EbfdzHBc2jRbZbzVjeewY+Vldb0x

Score

N/A

Malware Config

Signatures

Files

a569990c1cd339c1b2c7454c9e39edec86463d71f198464b0c08216393e5e636
.exe windows x86

62657e627e536e0ea2c7452695defda3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ord64
ord129
SHGetSpecialFolderPathW
SHSetUnreadMailCountW
ExtractAssociatedIconW
ord9
ord88
ord137
SHGetMalloc
SHGetFileInfoW
ExtractIconExA
ShellExecuteExW
ord164
ord688

comctl32

DestroyPropertySheetPage
ImageList_Draw
InitCommonControlsEx
ImageList_GetIcon
PropertySheetA

ntdll

VerSetConditionMask

kernel32

lstrcatW
GetModuleHandleA
WriteProfileStringA
FindFirstVolumeMountPointA
GetWindowsDirectoryW
GetCurrentProcessId
SetFileAttributesW
GetVolumeInformationW
WaitForDebugEvent
SetProcessWorkingSetSize
WriteConsoleA
ExitProcess
DosDateTimeToFileTime
FindFirstFileW
FreeResource
UnmapViewOfFile
GetDriveTypeW
MoveFileExA
lstrcpynA
CreateProcessW
HeapAlloc
DeleteVolumeMountPointA
LoadLibraryExW
SetConsoleTextAttribute
GetSystemWindowsDirectoryW
GetTickCount
SetFileTime
GetVolumePathNameW
GetPrivateProfileIntA
TerminateThread
EnumSystemCodePagesA
SetConsoleMode
ReadFile
GetEnvironmentVariableA
ExitThread
WritePrivateProfileStringW
GlobalUnlock
SetCurrentDirectoryA
FindFirstFileA
CreateSemaphoreW

user32

ValidateRect
SetWindowTextW
DialogBoxIndirectParamA
SendMessageW
SetDlgItemTextW
RegisterClipboardFormatW
MessageBoxW
InsertMenuW
GetMenuItemCount
FreeDDElParam
SetWindowPos
DefWindowProcA
GetKeyboardLayoutList
SystemParametersInfoW
UnregisterClassA
BringWindowToTop
InvalidateRect
CheckMenuRadioItem
RegisterWindowMessageA
GetMenuItemInfoW
FindWindowW
DdeKeepStringHandle
EnumDisplaySettingsA
DdeInitializeA
MessageBeep
UnregisterClassW
LoadImageW
wvsprintfW
SendDlgItemMessageA
CreateDialogParamA
RemovePropW
CloseClipboard
GetWindow
GetClassLongA
GetKeyboardLayoutNameA
TranslateAcceleratorA

gdi32

DeleteMetaFile
PlayMetaFile
MoveToEx
EnumFontFamiliesExW

Exports

Exports

?sesmic@@YGKPA_K@Z

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.closer
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cpp
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.artp
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dctp
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gktp
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdtp
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iftp
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdat1
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat2
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat3
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat4
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62657e627e536e0ea2c7452695defda3

Headers

DLL Characteristics

File Characteristics

Imports

shell32

comctl32

ntdll

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.closer Size: 61KB - Virtual size: 60KB

.cpp Size: 2KB - Virtual size: 1KB

.artp Size: 1KB - Virtual size: 1KB

.dctp Size: 2KB - Virtual size: 1KB

.gktp Size: 1024B - Virtual size: 820B

.cdtp Size: 1024B - Virtual size: 668B

.iftp Size: 512B - Virtual size: 412B

.data Size: 14KB - Virtual size: 14KB

.rdat1 Size: 55KB - Virtual size: 54KB

.rdat2 Size: 44KB - Virtual size: 43KB

.rdat3 Size: 44KB - Virtual size: 43KB

.rdat4 Size: 33KB - Virtual size: 32KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 43KB - Virtual size: 42KB

.closer
Size: 61KB - Virtual size: 60KB

.cpp
Size: 2KB - Virtual size: 1KB

.artp
Size: 1KB - Virtual size: 1KB

.dctp
Size: 2KB - Virtual size: 1KB

.gktp
Size: 1024B - Virtual size: 820B

.cdtp
Size: 1024B - Virtual size: 668B

.iftp
Size: 512B - Virtual size: 412B

.data
Size: 14KB - Virtual size: 14KB

.rdat1
Size: 55KB - Virtual size: 54KB

.rdat2
Size: 44KB - Virtual size: 43KB

.rdat3
Size: 44KB - Virtual size: 43KB

.rdat4
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 5KB - Virtual size: 4KB