64a77d5d5ef16581761953dfccaf5a66d11bb9535b043525a6ee8b3b082fe6f7

Sharing

Copy URL Twitter E-mail

General

Target

64a77d5d5ef16581761953dfccaf5a66d11bb9535b043525a6ee8b3b082fe6f7
Size

124KB
MD5

4e6e7b7616b102fe59b6b2be5ec5724b
SHA1

8d048d48a6d036bc63bf6ce20ca41ba8d71e04f3
SHA256

64a77d5d5ef16581761953dfccaf5a66d11bb9535b043525a6ee8b3b082fe6f7
SHA512

1ce27654baafc249d8868e4263ad11f460eeba1168a82022e9b480fe8c931f655ad5d7a787c42635412ffe0ab23d93b80f7d5f2422b85541c881649f4367ecd0
SSDEEP

3072:T5XePO3ivbETgBsnhkgmSiw7RQWalBhSbJlLfBHT:FX27D1Kiw9Rc8vF

Score

N/A

Malware Config

Signatures

Files

64a77d5d5ef16581761953dfccaf5a66d11bb9535b043525a6ee8b3b082fe6f7
.exe windows x86

93aa2d27c8ab58063b5ce2d6fbf674f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
DebugBreak
OutputDebugStringW
lstrlenA
HeapDestroy
GetLastError
CreateMutexW
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceW
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
Sleep
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
CreateProcessW
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapSize
TerminateProcess
SetLastError
TlsAlloc
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
HeapFree
ExitThread
TlsGetValue
TlsSetValue
CreateThread
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc
HeapReAlloc
RtlUnwind
WaitForSingleObject
GetModuleFileNameW
WritePrivateProfileStringW
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
InterlockedIncrement
SetProcessWorkingSetSize
WriteFile
InterlockedDecrement
CreateFileW
CloseHandle
GetCurrentProcess
FlushInstructionCache
lstrlenW
SetUnhandledExceptionFilter
InterlockedExchange

user32

FillRect
GetClientRect
BeginPaint
SetWindowLongW
InvalidateRect
PtInRect
DefWindowProcW
GetWindowTextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DrawTextW
GetWindowThreadProcessId
CreateDialogIndirectParamW
GetClassInfoW
RegisterClassW
EndDialog
SetCursor
LoadCursorW
GetWindowLongW
CallWindowProcW
GetParent
RegisterClassExW
GetClassInfoExW
RegisterWindowMessageW
GetSysColor
GetDlgItem
ReleaseDC
SendMessageW
SetForegroundWindow
EndPaint
GetDC
SetFocus
CharNextW
wvsprintfW
MessageBoxW
KillTimer
CopyRect
SetTimer
ScreenToClient
DialogBoxParamW
ShowWindow
FindWindowW
PostQuitMessage
GetWindowRect
SystemParametersInfoW
MapWindowPoints
GetSystemMetrics
LoadImageW
IsDialogMessageW
PostMessageW
EqualRect
LoadStringW
wsprintfW
CreateWindowExW
GetWindowTextLengthW
SetWindowTextW
InvalidateRgn
SetCapture
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow
RedrawWindow
DestroyWindow
IsWindow
GetClassNameW
SetWindowPos
GetFocus
IsChild
GetWindow

gdi32

SetBkMode
SetTextColor
SelectObject
CreateSolidBrush
CreateFontW
CreateFontIndirectW
DeleteDC
BitBlt
CreateCompatibleBitmap
GetDeviceCaps
GetObjectW
GetStockObject
ExtTextOutW
DeleteObject
CreateCompatibleDC
SetBkColor

advapi32

RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW

ole32

CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
SysAllocStringLen
LoadRegTypeLi
SysStringLen
DispCallFunc
VariantClear
SysAllocString
SysFreeString

comctl32

_TrackMouseEvent
InitCommonControlsEx

wininet

InternetSetOptionW
InternetReadFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetCrackUrlW
HttpQueryInfoW
InternetGetConnectedState

shlwapi

PathFileExistsW
PathCombineW
PathAppendW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93aa2d27c8ab58063b5ce2d6fbf674f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

shlwapi

iphlpapi

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 8KB