1a326e11aff12b18b64ac54169547310a57c5f7aa38865b61910468889352508

Sharing

Copy URL Twitter E-mail

General

Target

1a326e11aff12b18b64ac54169547310a57c5f7aa38865b61910468889352508
Size

86KB
MD5

bfad838760eaba2f958197da47868627
SHA1

3bae24412d709a8a5d0c564e73da47185e490db9
SHA256

1a326e11aff12b18b64ac54169547310a57c5f7aa38865b61910468889352508
SHA512

9c99147aaa42d7fb26e11b6fd5960ec46059e6b228537243391f08f0e6701fecfcae5564759a70a2e2c972783fda6fcb55e4cb9aa39e3a3c0edd0966d6bf8d68
SSDEEP

1536:+ucaS9mhEf8+ptUSjqFMaztleruMV1yPMR3pLLJZweL+C+2V5NPXhO:mjTlCttleruqyPMZBLJOrjYJXh

Score

N/A

Malware Config

Signatures

Files

1a326e11aff12b18b64ac54169547310a57c5f7aa38865b61910468889352508
.exe windows x86

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

InitAtomTable
lstrcpynW
HeapValidate
GetFileAttributesW
MulDiv
TerminateProcess
IsDBCSLeadByte
CreateFileW
lstrlenW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
UnhandledExceptionFilter
LockResource
CreateEventW
SizeofResource
FoldStringW
GetModuleHandleA
LoadLibraryExA
HeapSetInformation
CreateMutexA
IsDebuggerPresent
GetStringTypeW
PurgeComm
ReleaseMutex
DeleteFileW
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
LoadLibraryW
WideCharToMultiByte
GetTickCount
GlobalLock
HeapFree
GetCurrentActCtx
SystemTimeToFileTime
LoadResource
IsProcessorFeaturePresent
VirtualQuery
GetCPInfo
UnmapViewOfFile
MapViewOfFile
FindResourceA
CreateMutexW
GetDateFormatW
PostQueuedCompletionStatus
GetCommandLineW

user32

LoadIconW
RegisterClassExW
ChildWindowFromPoint
DrawFocusRect
GetCapture
GetDC
wsprintfW
PtInRect
EnumWindows
GetClassLongW
SetFocus
UnhookWinEvent
FindWindowW
WindowFromPoint
MessageBeep
CallNextHookEx
LoadCursorW
GetKeyState
IsZoomed
PostMessageW
SetCapture
FillRect
RegisterWindowMessageW
GetMessageW
ScreenToClient
DestroyWindow
ClientToScreen
OffsetRect
InvalidateRect
SetScrollPos
GetDlgItem
CharUpperW
SetWindowsHookExA
SetWindowPos
SendMessageTimeoutW
CreateDialogParamW
OpenClipboard
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
IsWindowVisible
SetDlgItemTextW
MapWindowPoints
EnableWindow
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
SetWindowsHookExW

gdi32

GetTextMetricsW
SetBkMode
GetObjectW
StartDocW
SetROP2
CreatePen

comdlg32

GetSaveFileNameW
ReplaceTextW
ChooseFontW

advapi32

RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 20KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 20KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 44KB - Virtual size: 43KB