4099a8fdaebd9d49280e3d170459b42fd0f5bbe44b8ec69259f49890f698694b

Sharing

Copy URL Twitter E-mail

General

Target

4099a8fdaebd9d49280e3d170459b42fd0f5bbe44b8ec69259f49890f698694b
Size

178KB
MD5

836731db67460ee0cbda215586357e1f
SHA1

eec1f3d40807fbea98eaaf9dd2fd08957851f4d8
SHA256

4099a8fdaebd9d49280e3d170459b42fd0f5bbe44b8ec69259f49890f698694b
SHA512

274ee67c600f98df91bdf8492d9517ec7287bb8f32a4b15457646b118296f58346d69787c3dc553f8bef1b988f3b728045b42f6f9c037888961ee62e06fdd406
SSDEEP

3072:nZyiYKFveDpJpYF6rXAC0p6IgO0grcsKUilUT3kSqKn7:ZyiYUApjA1pWuFilU44

Score

N/A

Malware Config

Signatures

Files

4099a8fdaebd9d49280e3d170459b42fd0f5bbe44b8ec69259f49890f698694b
.exe windows x86

ef7cc0890ab848fcf7e0a2d4551e9033

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeA

kernel32

HeapReAlloc
lstrcmpW
GetWindowsDirectoryA
FindFirstChangeNotificationW
RegisterWaitForSingleObject
ConnectNamedPipe
GetPriorityClass
SetCurrentDirectoryA
EnumResourceNamesW
GetTempPathW
EscapeCommFunction
GetCommConfig
GlobalCompact
RemoveDirectoryW
GetSystemDirectoryW
OpenSemaphoreW
SetFileAttributesW
SetMailslotInfo
SleepEx
GetShortPathNameA
FindResourceExA
GlobalAddAtomA
LocalLock
GetLocaleInfoW
FlushViewOfFile
lstrcmpiA
LCMapStringA
FreeResource
SuspendThread
DeleteAtom
HeapWalk
GetLocalTime
FindFirstFileA
GetUserDefaultUILanguage
EnumSystemLocalesA
CompareStringA
UnlockFile
GetThreadPriority
lstrlenA
EnterCriticalSection
lstrcatW
GetStartupInfoW
RaiseException
HeapValidate
SetLastError
FindNextChangeNotification
GlobalReAlloc
RtlUnwind
WaitForMultipleObjectsEx
WinExec

user32

GetKeyboardLayoutNameW
SetRectEmpty
GetWindowLongA
wsprintfA
ScrollWindow
CharLowerA
InSendMessage
SetParent
MoveWindow
CreateDialogIndirectParamW
CreateDialogParamW
SetMenuDefaultItem
ToUnicodeEx
AllowSetForegroundWindow
DrawEdge
GetMessageA
PostMessageW
DispatchMessageW
ActivateKeyboardLayout
LoadMenuW
RegisterWindowMessageW
LookupIconIdFromDirectory
SendMessageA
SetWindowTextA
CharUpperBuffA
ShowWindowAsync
LoadStringW
SetPropW
SetCursor
AppendMenuA
LoadAcceleratorsA
SetDlgItemTextA
ReleaseDC
GetDCEx
LoadImageW
GetDlgItemTextW
SendNotifyMessageW
WaitMessage
PeekMessageW
HideCaret
ValidateRect
SetCaretPos
MapWindowPoints
EnumWindows
GetWindowRect
CheckMenuRadioItem
GetClassInfoExA
GetMenuItemRect
ChildWindowFromPointEx

Exports

Exports

GenerateListItemExA
RemoveDialogW
DeleteTimeEx
AddSection
IncrementComponentOld
FindMutexExW
OnTimerExA
PutOptionOriginal
InstallEventW
OnProviderExW
SetValueOriginal
IsFunctionA
RtlClassExA
IsNotKeyNameA
OnArgumentNew
FormatDateTimeW
KillDirectoryOld
EnumSizeNew
IsNotDialogEx
LoadDateEx
AddPen
ShowSystem
IsNotDeviceExW
LoadDirectoryOriginal
GenerateMemory
AddWindowInfoW
Header
CrtPathExA
GlobalEventEx
IncrementWindowExA
IncrementWidth
GetDeviceEx

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zek
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef7cc0890ab848fcf7e0a2d4551e9033

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 139KB

.On59 Size: 2KB - Virtual size: 2KB

.Zek Size: 1024B - Virtual size: 823B

.Re82 Size: 22KB - Virtual size: 25KB

.Lax503 Size: 512B - Virtual size: 322B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 140KB - Virtual size: 139KB

.On59
Size: 2KB - Virtual size: 2KB

.Zek
Size: 1024B - Virtual size: 823B

.Re82
Size: 22KB - Virtual size: 25KB

.Lax503
Size: 512B - Virtual size: 322B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB