433441e74874ca48416813639125220054f9ddb762bb08dc9f02aed788594be6

Sharing

Copy URL Twitter E-mail

General

Target

433441e74874ca48416813639125220054f9ddb762bb08dc9f02aed788594be6
Size

456KB
MD5

0a4a13a9a2f3c0b5e571082655310386
SHA1

d930dd37ed8378e77d10290471c688b67014c71c
SHA256

433441e74874ca48416813639125220054f9ddb762bb08dc9f02aed788594be6
SHA512

1b642010f462199d7e0ffd09461dcae72513922e8d2bb30c92bca53eddd7664ddfd44407519d18265476a936747f20e95a2c38ef4617cc7a2209496d2ba2eeaa
SSDEEP

12288:JOnpzqsTtzdl1bHT+zpegpON0vwOmSAqEkt5LJE3X:JAVBz31uzpzwOmSASbLu3

Score

N/A

Malware Config

Signatures

Files

433441e74874ca48416813639125220054f9ddb762bb08dc9f02aed788594be6
.exe windows x86

71d541358caeba8e1f510a511f3ce14e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
SetStdHandle
LoadLibraryW
SetFilePointer
GetStringTypeW
LCMapStringW
HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
WriteConsoleW
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
GetConsoleCP
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetModuleFileNameW
GetStdHandle
WriteFile
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
CreateFileA
HeapReAlloc
ReadFile
CreateFileW
GetLastError
GetProcessHeap
HeapAlloc
lstrcpynA
GetFileType
InitializeCriticalSection
ExitProcess
MulDiv
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
SetEndOfFile
SetLastError
GetConsoleMode
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DecodePointer
EncodePointer
RaiseException
RtlUnwind
MultiByteToWideChar
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent

user32

SendDlgItemMessageA
CloseClipboard
SetWindowLongA
GetWindowLongA
GetSysColor
IsWindow
ScrollWindowEx
OpenClipboard
GetClipboardData
GetClassNameW
GetDC
DeferWindowPos
BeginDeferWindowPos
GetClientRect
EndDeferWindowPos
UpdateWindow
GetParent
EndPaint
SendDlgItemMessageW
MoveWindow
BeginPaint
GetWindow
LoadStringA
DestroyMenu
SetDlgItemTextA
LoadCursorA
SystemParametersInfoA
GetDlgItem
GetMenu
GetSubMenu
GetScrollInfo
SetScrollInfo
DestroyWindow
SendMessageW
DefWindowProcW
SetTimer
OffsetRect
IsWindowVisible
GetDlgItemTextW
GetDesktopWindow
GetWindowInfo
PostMessageA
InvalidateRect
ReleaseDC
EndMenu
SetScrollPos

gdi32

CreateCompatibleDC
GetObjectA
ExtFloodFill
SetTextColor
TextOutA
DeleteObject
DeleteDC
CreateSolidBrush
GetDeviceCaps
CreateBitmapIndirect
SetStretchBltMode
SelectObject

comdlg32

GetOpenFileNameA

advapi32

ConvertStringSidToSidW
LookupAccountSidW

shell32

ExtractIconA

ole32

CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
CoCreateInstance

mpr

WNetAddConnection2W
WNetGetUniversalNameA

comctl32

CreateToolbarEx

rpcrt4

UuidToStringW
RpcStringFreeW

gdiplus

GdipGetImageEncodersSize
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71d541358caeba8e1f510a511f3ce14e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

mpr

comctl32

rpcrt4

gdiplus

Sections

.text Size: 70KB - Virtual size: 70KB

.rdata Size: 361KB - Virtual size: 361KB

.data Size: 13KB - Virtual size: 21KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 70KB - Virtual size: 70KB

.rdata
Size: 361KB - Virtual size: 361KB

.data
Size: 13KB - Virtual size: 21KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB