dac7c28ba6fc40b129dea9256cdba8317d801986196e8530554867a93503be70

Sharing

Copy URL Twitter E-mail

General

Target

dac7c28ba6fc40b129dea9256cdba8317d801986196e8530554867a93503be70
Size

108KB
MD5

3b80754f7be9b26cb7ff582254703070
SHA1

dd1f0ae3bee3425b19925188339226a0755ba797
SHA256

dac7c28ba6fc40b129dea9256cdba8317d801986196e8530554867a93503be70
SHA512

c2549770ac4e14109229014d9ed39390a88ad5c602568926b3b5cdc94ba66479b3497e4f1d0af4a9c995ffb4dbc6f7c9da9c7ae1fbe405dcf28e5c457bb17604
SSDEEP

1536:kpfn3dVoNBCgzp/y6RPr/xkqn5f43h4MyrHkPzg2kK/5SrEaT:Qfn3zorh1kqn5fQryzkPzVOE

Score

N/A

Malware Config

Signatures

Files

dac7c28ba6fc40b129dea9256cdba8317d801986196e8530554867a93503be70
.exe windows x86

87cf0b830340b0f727ae4d46ffedbbc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
QueryPerformanceCounter
GetStartupInfoW
GetCurrentThreadId
CompareFileTime
GetModuleHandleA
GetCurrentProcessId
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
GetStartupInfoA
VirtualAlloc
lstrlenA
ResetEvent
GetModuleHandleW
lstrlenW
FindFirstFileW
CreateThread
HeapDestroy
ExitProcess
LCMapStringW
SetStdHandle
GetFileAttributesA
GetVersionExW
WaitForSingleObject
WaitForSingleObjectEx
FlushFileBuffers
CreateEventW
SizeofResource
InterlockedExchangeAdd
GetModuleFileNameA
GetACP
GlobalFree
OutputDebugStringA
FreeEnvironmentStringsW
GetCommandLineW
TlsAlloc
GetStdHandle
GetFileSize
FormatMessageW
GetProcessHeap
Sleep
InitializeCriticalSection
GetModuleFileNameW
HeapAlloc
GetStringTypeW
MultiByteToWideChar
HeapSize
RtlUnwind
HeapFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
GetLastError
SetLastError
TlsFree
TlsSetValue
TlsGetValue
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
GetProcAddress
TerminateProcess
DecodePointer
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSetInformation
GetCommandLineA
HeapReAlloc

user32

SetWindowTextW
GetWindowInfo
MoveWindow
CreateWindowExW
DialogBoxParamA
DestroyWindow
MessageBoxW
SetRectEmpty
FillRect
PtInRect
DrawIcon
GetForegroundWindow
DispatchMessageA
IsWindowVisible
GetWindowPlacement
CopyRect
GetWindowRgn
EnableWindow
DrawIconEx
SendDlgItemMessageA
DestroyMenu
ShowWindowAsync
GetDlgItemTextA
GetCapture
wsprintfA
GetWindowLongW
CreatePopupMenu
GetDCEx
GetActiveWindow
PostQuitMessage
GetMenuItemRect
MessageBoxA
IsWindowUnicode
GetDlgItemTextW
GetWindowTextLengthW
IsChild
OffsetRect
AdjustWindowRectEx
SetCursorPos
SetFocus
LoadStringW
IntersectRect
GetMessagePos
PostMessageA
GetMenuDefaultItem
GetMenuItemCount
GetSystemMetrics
GetWindowTextA
GetDlgItemInt
SetWindowLongW
GetClientRect
CharNextW
GetDesktopWindow
KillTimer
DrawTextW
EndPaint
LoadCursorW
SetMenuItemInfoW
ChildWindowFromPoint
MessageBeep
ScreenToClient
SendMessageW
GetMenuStringA
LoadIconW
CharNextA
ExitWindowsEx
EndDialog
InflateRect
MapWindowPoints
GetMenuItemInfoW
GetParent
SetWindowTextA
SetRect
GetMessageW
RegisterClassA
TranslateMessage
GetFocus
TrackPopupMenu
ScrollWindowEx
GetWindowDC
IsIconic
IsWindowEnabled
ReleaseDC
GetMenuItemInfoA
SetCapture
SetWindowPos
CheckMenuItem
UnhookWindowsHookEx
BeginPaint
GetDlgItem
PeekMessageA

msi

ord50

shell32

SHGetIconOverlayIndexA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87cf0b830340b0f727ae4d46ffedbbc2

Headers

File Characteristics

Imports

kernel32

user32

msi

shell32

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 40KB - Virtual size: 43KB

.tls Size: 4KB - Virtual size: 17B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 40KB - Virtual size: 43KB

.tls
Size: 4KB - Virtual size: 17B

.reloc
Size: 4KB - Virtual size: 2KB