373d775b05997fa371a2e95a17c467a46b96fd316a364c4aaefd6f0c23bba168

Sharing

Copy URL Twitter E-mail

General

Target

373d775b05997fa371a2e95a17c467a46b96fd316a364c4aaefd6f0c23bba168
Size

717KB
MD5

82515e5ab24177f5fbe8bdb69287ff80
SHA1

931ee22493bfaf7f6c2649796c2ad4d17a0dcbf5
SHA256

373d775b05997fa371a2e95a17c467a46b96fd316a364c4aaefd6f0c23bba168
SHA512

be22e0d22a84107c45a16fe2b2f96c83c47e280b5f962eda9e69c74cac23ab4a548903e6ae888e6423ec64f3f48e1ed913486f559c90f94a3f760ef7b1bddda0
SSDEEP

12288:mvbXPEl2AUkpjvLqNdhBeVdjesE+qUvwrHzXGAX52Msf:mvwpjvOPenfE+qUvwrTXZ52M

Score

N/A

Malware Config

Signatures

Files

373d775b05997fa371a2e95a17c467a46b96fd316a364c4aaefd6f0c23bba168
.exe windows x64

a6d631d7b57a64eeb8f869a8bd9aeb5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData

kernel32

GlobalAlloc
LocalFree
FindNextFileW
LocalAlloc
FindClose
IsValidLanguageGroup
GetSystemDirectoryW
FindFirstFileW
ExpandEnvironmentStringsW
GetSystemWindowsDirectoryW
CloseHandle
GetStringTypeW
CreateFileMappingW
IsDBCSLeadByteEx
GlobalFree
GetCPInfo
UnmapViewOfFile
MapViewOfFile
GetFileSize
EnumSystemCodePagesW
IsValidCodePage
HeapSetInformation
DecodePointer
LockResource
GetThreadLocale
GlobalUnlock
lstrlenW
MultiByteToWideChar
lstrcmpW
CreateFileW
Sleep
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
FindResourceW
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetACP
EncodePointer
CompareStringW
MulDiv
SizeofResource
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
RegisterApplicationRestart
GetModuleHandleW
GlobalLock
LoadResource
FreeLibrary

gdi32

GetTextExtentPointW
GetLayout
ExtTextOutW
GetTextExtentPoint32W
GetCharWidth32W
EnumFontFamiliesExW
GetFontData
MoveToEx
BitBlt
TranslateCharsetInfo
PatBlt
GetTextMetricsW
LineTo
SetTextColor
DeleteDC
CreateFontIndirectW
GetDeviceCaps
SetBkColor
UnrealizeObject
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
GetObjectW
GetTextAlign
CreatePen
SetTextAlign
CreateDIBitmap
TextOutW
GetStockObject
CreateSolidBrush

user32

GetDlgItem
ReleaseDC
GetClassNameW
SetScrollPos
GetWindowTextW
GetWindowLongW
InvalidateRect
GetAsyncKeyState
GetKeyboardLayout
LoadIconW
IsDialogMessageW
ShowCursor
TranslateMessage
DrawFocusRect
GetDC
GetUpdateRect
SetScrollRange
PtInRect
BeginPaint
SetFocus
GetClientRect
GetWindowLongPtrW
WindowFromPoint
IsWindowEnabled
GetWindowInfo
LoadCursorW
GetParent
GetFocus
KillTimer
PostMessageW
SetCapture
FillRect
GetWindowDC
PostQuitMessage
GetMessageW
GetWindowRect
ScreenToClient
SetTimer
GetWindowTextLengthW
DestroyWindow
ClientToScreen
EndPaint
SetScrollInfo
AdjustWindowRectEx
GetDesktopWindow
GetScrollInfo
SetRect
UnregisterClassW
RegisterClipboardFormatW
SetWindowLongW
SendDlgItemMessageW
GetSysColor
GetCursorPos
LoadStringW
EnumChildWindows
ShowWindow
CreateDialogParamW
CreateWindowExW
RegisterClassW
GetSystemMetrics
SetWindowLongPtrW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
UpdateWindow
EnableWindow
GetDlgCtrlID
SetWindowTextW
ValidateRect
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
MoveWindow
DispatchMessageW
ReleaseCapture
MapWindowPoints

msvcrt

memset
wcsncpy_s
free
malloc
wcsstr
_vsnwprintf
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
??3@YAXPEAX@Z
calloc
realloc
??2@YAPEAX_K@Z
_wtol
towupper
_wcsupr
swscanf_s
memcpy

comctl32

ord17

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CoGetMalloc
DoDragDrop

getuname

GetUName

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 556KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6d631d7b57a64eeb8f869a8bd9aeb5b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

ole32

getuname

Sections

.text Size: 66KB - Virtual size: 65KB

.data Size: 1KB - Virtual size: 135KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 91KB - Virtual size: 91KB

.reloc Size: 556KB - Virtual size: 2.4MB

.text
Size: 66KB - Virtual size: 65KB

.data
Size: 1KB - Virtual size: 135KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 91KB - Virtual size: 91KB

.reloc
Size: 556KB - Virtual size: 2.4MB