201e40d56a17f1ab41639cde3bc9f6c285fe18a5971635738959d14d55825e81

Sharing

Copy URL Twitter E-mail

General

Target

201e40d56a17f1ab41639cde3bc9f6c285fe18a5971635738959d14d55825e81
Size

138KB
MD5

0e4c065fd6b0a90bb10c2028dfe063f0
SHA1

b830d18047dc5ef6c47d2f074f443b893337e164
SHA256

201e40d56a17f1ab41639cde3bc9f6c285fe18a5971635738959d14d55825e81
SHA512

66abc3282f9f250fdb435baba666b6445123f38ee9937804901075a8177121f9fbf64d146e60873c1a8ce7c8f198ec417eb097ea9ed6ce50628960d594db07e0
SSDEEP

1536:wKc57WYGRpnGovPkR02n6eLA5jrMSC+6DKmYIzLYFs2b/f4KKUMaVICSLo40NFZ3:wJWdJdo0QI5jroDKhIvg7f4pUM/AF+y

Score

N/A

Malware Config

Signatures

Files

201e40d56a17f1ab41639cde3bc9f6c285fe18a5971635738959d14d55825e81
.exe windows x86

f0d79f400e31841dffc1fac05ae66fbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

shlwapi

StrCpyW
PathAppendW
SHGetValueW
PathRemoveFileSpecW
StrCmpW
SHSetValueW

ws2_32

connect
gethostbyname
inet_addr
htons
socket
WSACleanup
WSAStartup
setsockopt
closesocket
recv
send

kernel32

GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
LoadLibraryA
GetTempPathW
GetCurrentProcessId
WideCharToMultiByte
lstrlenW
GetCommandLineW
WaitForSingleObject
CloseHandle
CreateDirectoryW
GetTempFileNameW
CreateFileW
WriteFile
GetModuleFileNameW
SetCurrentDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileW
CreateThread
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetStringTypeW
LeaveCriticalSection
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetModuleFileNameA
GetStdHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapFree
GetLastError
RaiseException
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
EnterCriticalSection
TerminateProcess
GetStartupInfoA
GetCommandLineA

user32

GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
SetDlgItemTextW
DefWindowProcW
GetPropW
EndPaint
FillRect
BeginPaint
SetFocus
PostQuitMessage
RemovePropW
DestroyWindow
DialogBoxParamW
PostMessageW
SetPropW
EndDialog
InvalidateRect
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
IsZoomed
SetWindowPos
SendMessageW
GetWindowLongW
ShowWindow
MoveWindow
wsprintfA
GetClientRect
CreateWindowExW
AdjustWindowRectEx
SystemParametersInfoW
RegisterClassExW
LoadCursorW
LoadIconW
LoadBitmapW
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
SetWindowTextW
GetDesktopWindow
SetWindowLongW

gdi32

DeleteObject
CreateSolidBrush
StretchBlt
GetStockObject
DeleteDC
GetObjectW
SelectObject
CreateCompatibleDC

shell32

CommandLineToArgvW
SHFileOperationW

ole32

CoUninitialize
CoInitialize

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0d79f400e31841dffc1fac05ae66fbd

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

ws2_32

kernel32

user32

gdi32

shell32

ole32

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 27KB - Virtual size: 26KB

.reloc Size: 5KB - Virtual size: 5KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 27KB - Virtual size: 26KB

.reloc
Size: 5KB - Virtual size: 5KB

.rmnet
Size: 56KB - Virtual size: 60KB