855a562e36f5c8cf6f9ab53dfddbf6363fcc99a800cf13320ea230633737fedf

Sharing

Copy URL Twitter E-mail

General

Target

855a562e36f5c8cf6f9ab53dfddbf6363fcc99a800cf13320ea230633737fedf
Size

708KB
MD5

90727ef722e7ab593f0d99099dc3cac0
SHA1

56129b4b883884835f51cf9379c5d6b2769003bb
SHA256

855a562e36f5c8cf6f9ab53dfddbf6363fcc99a800cf13320ea230633737fedf
SHA512

5e6ef96af4144335a5d13a875a1126c5a72fc94fa2122d0a513ef957059cb34c8a214c7242aaeeb568861701a83ac5e10cc223bb54a6fe728406027406781532
SSDEEP

12288:ezNwiUjiSM0R+Hig72jXG8L4bIITTRf44EQeqz5ICNJVaFd+5PaG5:e5/0R+Hig72jXGU4cITTZ44ESzJHPaG5

Score

N/A

Malware Config

Signatures

Files

855a562e36f5c8cf6f9ab53dfddbf6363fcc99a800cf13320ea230633737fedf
.exe windows x86

dc95b325ebefc577093402a37e74756a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetCurrentThreadId
FindResourceA
FreeResource
FreeLibrary
LoadResource
SizeofResource
SearchPathA
LoadLibraryA
LockResource
GetModuleFileNameA
Sleep
GetStartupInfoA
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetStdHandle
CreateFileA
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetThreadPriority
CreateThread
TerminateThread
QueryPerformanceFrequency
GetSystemDirectoryA
VirtualLock
GetLocaleInfoA
MulDiv
CloseHandle
DeleteCriticalSection
ResetEvent
EnterCriticalSection
LeaveCriticalSection
CreateEventA
InitializeCriticalSection
SetEvent
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
lstrcpyA
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetTempFileNameA
GetTempPathA
GetFileAttributesA
GetTickCount
FindNextFileA
FindClose
FindFirstFileA
GetEnvironmentStrings
lstrlenA
ExitThread

user32

IsChild
IsIconic
ScreenToClient
SetCursor
DestroyWindow
ClientToScreen
EndPaint
DrawTextExA
LoadBitmapA
PostQuitMessage
GetForegroundWindow
MessageBoxA
SetCursorPos
UnregisterClassA
GetWindowLongA
CreateWindowExA
DefWindowProcA
SetWindowPos
GetCursorPos
ShowWindow
PostMessageA
SetCapture
ReleaseCapture
GetSystemMetrics
IsWindowVisible
LoadCursorA
ChangeDisplaySettingsA
GetWindowThreadProcessId
RegisterClassA
SystemParametersInfoA
GetDC
ReleaseDC
GetDesktopWindow
ToAscii
GetKeyState
EnumDisplaySettingsA
GetClientRect
SetFocus
BeginPaint
GetDoubleClickTime
GetCapture
LoadImageA
SetWindowTextA
DispatchMessageA
PeekMessageA
InvalidateRect
TranslateMessage
GetKeyboardState
AdjustWindowRectEx
GetMessageA
SetTimer
KillTimer
SendMessageA
WaitMessage
SetWindowLongA

shell32

ShellExecuteA

winmm

timeSetEvent
timeGetTime
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutOpen
timeKillEvent
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutGetPosition
waveOutClose

msacm32

acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamUnprepareHeader
acmStreamConvert

gdi32

CreateDIBSection
SelectObject
CreateCompatibleDC
GetObjectA
GetStockObject
DeleteObject
CombineRgn
RectInRegion
CreateRectRgn
GetGlyphOutlineA
GetClipRgn
MoveToEx
BitBlt
GetViewportOrgEx
LineTo
SetTextColor
Polygon
SetBkColor
ExcludeClipRect
GdiFlush
CreateHalftonePalette
LineDDA
GetRegionData
SetBkMode
DeleteDC
GetTextMetricsA
CreateFontA
GetTextExtentPoint32A
GetDeviceCaps
CreateSolidBrush
RestoreDC
ExtTextOutA
IntersectClipRect
SetTextAlign
GetClipBox
CreatePen
SelectPalette
RealizePalette
SaveDC
OffsetClipRgn
Ellipse
SelectClipRgn
OffsetRgn

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA

ole32

CoInitialize

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc95b325ebefc577093402a37e74756a

Headers

File Characteristics

Imports

kernel32

user32

shell32

winmm

msacm32

gdi32

advapi32

ole32

Sections

.text Size: 488KB - Virtual size: 486KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 60KB - Virtual size: 217KB

.tls Size: 4KB - Virtual size: 7B

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 488KB - Virtual size: 486KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 60KB - Virtual size: 217KB

.tls
Size: 4KB - Virtual size: 7B

.rsrc
Size: 68KB - Virtual size: 67KB