22e497cccc3779e59c273ee6b258dea6243ef6feb2fc73627964821da838b952

Sharing

Copy URL Twitter E-mail

General

Target

22e497cccc3779e59c273ee6b258dea6243ef6feb2fc73627964821da838b952
Size

200KB
MD5

3b87069da27d1234231172595d92c3f0
SHA1

82002265c22fd7be570c9c4729e4924b8a1fd931
SHA256

22e497cccc3779e59c273ee6b258dea6243ef6feb2fc73627964821da838b952
SHA512

663a2e5e9bc9cfbad90e4558215626b19da7a42b1d7c41bfa9e489a6429d4588f34ac2b13800dc12cfd07fc3226049b83f26d4642f2df121368bb75d8ebc2944
SSDEEP

6144:0rnqPDBX7NIlc6wOMnXqYIGvQgHbXjki5S:02voMXzI/gHa

Score

N/A

Malware Config

Signatures

Files

22e497cccc3779e59c273ee6b258dea6243ef6feb2fc73627964821da838b952
.exe windows x86

ae3dc808b3570de5bdba820f155d46e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleFileNameA
IsBadHugeReadPtr
GlobalHandle
GetSystemTimeAsFileTime
SetEndOfFile
GetSystemInfo
GetFullPathNameW
HeapFree
GetCurrentThread
SetFilePointer
GetCPInfo
GlobalAlloc
GetFileAttributesW
lstrcmpiW
GlobalFree
GetVersionExW
GetProcessHeap
PostQueuedCompletionStatus
GetQueuedCompletionStatus
IsBadReadPtr
CreateEventW
InterlockedIncrement
GetCurrentProcessId
CloseHandle
ReadFile
GetLastError
CreateIoCompletionPort
GetPrivateProfileStringW
GetTickCount
FreeLibrary
MultiByteToWideChar
IsBadCodePtr
MulDiv
LoadLibraryW
WaitForMultipleObjects
OutputDebugStringA
GlobalLock
GetProfileIntA
InterlockedExchange
DeleteCriticalSection
lstrlenW
lstrcpyA
WaitForSingleObject
EnterCriticalSection
DeleteFileW
SetThreadPriority
SetEvent
GetEnvironmentStringsW
lstrcpyW
lstrcmpW
lstrlenA
IsBadWritePtr
GetCurrentProcess
GlobalMemoryStatus
QueryPerformanceCounter
InterlockedDecrement
ResetEvent
GetFileSize
WriteFile
GetThreadPriority
CreateSemaphoreW
WideCharToMultiByte
SetUnhandledExceptionFilter
lstrcpynW
CreateFileW
VirtualFree
LeaveCriticalSection
GlobalUnlock
ReleaseSemaphore
HeapAlloc
GetSystemDefaultLangID
CreateThread
InitializeCriticalSection
GetDiskFreeSpaceW

advapi32

RegEnumKeyExW
RegSetValueExW
RegOpenKeyW
RegOpenKeyExW
RegSetValueW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
RegQueryValueExW
RegEnumKeyW

msvcrt

_purecall
??3@YAXPAX@Z
_ftol
wcslen
??2@YAPAXI@Z
_except_handler3

user32

IsWindowVisible
GetClientRect
EnableWindow
IsWindow
CheckDlgButton
GetWindowRect
DestroyWindow
SetWindowLongW
CreateDialogParamW
SetCursor
GetDC
GetAsyncKeyState
PeekMessageW
CheckRadioButton
DefWindowProcW
LoadCursorW
wsprintfW
ShowWindow
TranslateMessage
MoveWindow
SetDlgItemTextW
ClientToScreen
ReleaseDC
SetDlgItemInt
GetWindowLongW
GetDesktopWindow
InvalidateRect
IsRectEmpty
SendMessageW
DispatchMessageW
LoadStringW
GetDlgItemInt
GetDlgItem

winmm

mixerOpen
mixerClose
mixerGetControlDetailsW
waveInStart
waveInUnprepareHeader
waveInReset
mixerGetLineControlsW
mixerGetID
waveInClose
waveInPrepareHeader
CloseDriver
waveInStop
OpenDriver
waveInAddBuffer
mixerGetLineInfoW
mixerSetControlDetails
waveInGetDevCapsW
SendDriverMessage
waveInOpen

msvfw32

ICOpen
ICClose
ICCompress
ICLocate
ICGetInfo
ICDecompress
ICSendMessage

ole32

CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoFreeUnusedLibraries

gdi32

GetStockObject
PatBlt
GetTextExtentPoint32W
SelectObject
GetPaletteEntries
GetObjectW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae3dc808b3570de5bdba820f155d46e5

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

user32

winmm

msvfw32

ole32

gdi32

version

Sections

.text Size: 172KB - Virtual size: 171KB

.data Size: 25KB - Virtual size: 25KB

.rsrc Size: 1024B - Virtual size: 644B

.text
Size: 172KB - Virtual size: 171KB

.data
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 1024B - Virtual size: 644B