d4da644ea1e21dec03027daac7df9f4259a697dff2e54d34abf14540240148dc

Sharing

Copy URL Twitter E-mail

General

Target

d4da644ea1e21dec03027daac7df9f4259a697dff2e54d34abf14540240148dc
Size

131KB
MD5

82888168e744bf78f1ba62da720ef270
SHA1

f36afbd084429b9a48e8ae654ea277b025cb2e62
SHA256

d4da644ea1e21dec03027daac7df9f4259a697dff2e54d34abf14540240148dc
SHA512

23e562c2f3a4bd285890cc9593a15112804378e757135ce584ab0c68f85439398a5ab6b1f3111b6d98ea349cdc53b96ae96bc1f85d12de7d28974fb224c507f5
SSDEEP

1536:pxGxA43zk0FXotMlexqMEIgoKToh8EEtv/+n+kzUza618WoQGS:X43R9oiljIgoKT0REp2+kQu61Ht

Score

N/A

Malware Config

Signatures

Files

d4da644ea1e21dec03027daac7df9f4259a697dff2e54d34abf14540240148dc
.exe windows x86

6f84c97d71ba32ae483b6836ee43acc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
DrawTextA
BeginPaint
CharNextA
SendDlgItemMessageA
SetClassLongA
GetParent
CreateDialogParamA
GetDlgItem
LoadCursorA
LoadBitmapA
PostQuitMessage
SetDlgItemTextA
EndDialog
EnableWindow
ScreenToClient
IsWindowVisible
FillRect
GetWindowRect
LoadIconA
GetDlgItemTextA
GetWindowTextA
CharPrevA
DestroyWindow
SetRect
RegisterClassA
SetWindowPos
SystemParametersInfoA
GetDesktopWindow
EndPaint

kernel32

CreateMutexA
SetThreadPriorityBoost
lstrlenA
GetModuleHandleExW
Sleep
GetLocalTime
GetLocaleInfoA
HeapFree
GetFileType
GetProcAddress
CreateFileA
InitializeCriticalSection
LocalUnlock
GetUserDefaultLCID
GetStringTypeW
GetTimeZoneInformation
SetEnvironmentVariableA
GetModuleHandleA
GetConsoleScreenBufferInfo
FileTimeToSystemTime
SetConsoleMode
GetVolumeInformationA
GetFullPathNameA
LeaveCriticalSection
WideCharToMultiByte
SetHandleCount
GetStdHandle
SetConsoleCtrlHandler
IsValidLocale
InterlockedExchange
GetStringTypeA
FindVolumeClose
GetProcessHeap
HeapCreate
EnumSystemLocalesA
GetSystemTime
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetEnvironmentVariableA
FindNextFileA
CompareStringW
SetStdHandle
GetCurrentProcess
GetFileTime
LCMapStringW
IsValidCodePage
LoadLibraryA
GetConsoleInputWaitHandle
GetModuleFileNameA
GetStartupInfoA
ExitProcess
HeapAlloc
WaitForSingleObject
GetConsoleMode
GetShortPathNameA
GetFileAttributesA
ReleaseMutex
FlushFileBuffers
GetVersionExA
GetDriveTypeA
FindClose
HeapDestroy
CompareStringA
SetVolumeLabelA
FindFirstFileA
GetLocaleInfoW
lstrcmpiA
LCMapStringA
GetDriveTypeA
VirtualAlloc
lstrcpynA
VirtualFree

shlwapi

wnsprintfW
wnsprintfA
wvnsprintfA
UrlGetPartA
AssocQueryStringW

gdi32

CreateRectRgn
SetBkColor
OffsetClipRgn
IntersectClipRect
GetStockObject
GetClipRgn
SelectObject
CreatePen
GetNearestColor
SetTextColor

shell32

ShellExecuteExA
ExtractIconExA
SHGetSpecialFolderPathW

ole32

OleInitialize
OleUninitialize
CoCreateInstance

urlmon

CreateURLMoniker

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kfgaiog
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wkpojrx
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6f84c97d71ba32ae483b6836ee43acc2

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

gdi32

shell32

ole32

urlmon

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 35KB

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 106KB - Virtual size: 107KB

kfgaiog Size: 4KB - Virtual size: 32KB

wkpojrx Size: 4KB - Virtual size: 80KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 35KB

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 106KB - Virtual size: 107KB

kfgaiog
Size: 4KB - Virtual size: 32KB

wkpojrx
Size: 4KB - Virtual size: 80KB