afaa05cd4bf53f905bffcc0fbd85ce3be18a539e3c2762f160f7e812a321993a

Sharing

Copy URL Twitter E-mail

General

Target

afaa05cd4bf53f905bffcc0fbd85ce3be18a539e3c2762f160f7e812a321993a
Size

86KB
MD5

5a37b27d4ae1994ab6179a3deafc4800
SHA1

4e412f2b7967406d28b54fc170ad8d35c928649b
SHA256

afaa05cd4bf53f905bffcc0fbd85ce3be18a539e3c2762f160f7e812a321993a
SHA512

c585251bafe242bad5089803a1cec860c984e0b713defc4567707733850ec6d33b362dca04eb5a58e7156c3c4ae6ff8d1aa2fbc1af023f949d870feeaa5a061a
SSDEEP

1536:wucaS9mhEf8+ptUSjqFMaztleruMV1yPMR3pLLJZweL+C+2V5NPXhO:sjTlCttleruqyPMZBLJOrjYJXh

Score

N/A

Malware Config

Signatures

Files

afaa05cd4bf53f905bffcc0fbd85ce3be18a539e3c2762f160f7e812a321993a
.exe windows x86

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

InitAtomTable
lstrcpynW
HeapValidate
GetFileAttributesW
MulDiv
TerminateProcess
IsDBCSLeadByte
CreateFileW
lstrlenW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
UnhandledExceptionFilter
LockResource
CreateEventW
SizeofResource
FoldStringW
GetModuleHandleA
LoadLibraryExA
HeapSetInformation
CreateMutexA
IsDebuggerPresent
GetStringTypeW
PurgeComm
ReleaseMutex
DeleteFileW
GetCurrentProcessId
GetSystemTime
SetUnhandledExceptionFilter
GetCurrentProcess
Sleep
LoadLibraryW
WideCharToMultiByte
GetTickCount
GlobalLock
HeapFree
GetCurrentActCtx
SystemTimeToFileTime
LoadResource
IsProcessorFeaturePresent
VirtualQuery
GetCPInfo
UnmapViewOfFile
MapViewOfFile
FindResourceA
CreateMutexW
GetDateFormatW
PostQueuedCompletionStatus
GetCommandLineW

user32

LoadIconW
RegisterClassExW
ChildWindowFromPoint
DrawFocusRect
GetCapture
GetDC
wsprintfW
PtInRect
EnumWindows
GetClassLongW
SetFocus
UnhookWinEvent
FindWindowW
WindowFromPoint
MessageBeep
CallNextHookEx
LoadCursorW
GetKeyState
IsZoomed
PostMessageW
SetCapture
FillRect
RegisterWindowMessageW
GetMessageW
ScreenToClient
DestroyWindow
ClientToScreen
OffsetRect
InvalidateRect
SetScrollPos
GetDlgItem
CharUpperW
SetWindowsHookExA
SetWindowPos
SendMessageTimeoutW
CreateDialogParamW
OpenClipboard
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
IsWindowVisible
SetDlgItemTextW
MapWindowPoints
EnableWindow
DefWindowProcW
CheckMenuItem
GetWindowThreadProcessId
SetWindowsHookExW

gdi32

GetTextMetricsW
SetBkMode
GetObjectW
StartDocW
SetROP2
CreatePen

comdlg32

GetSaveFileNameW
ReplaceTextW
ChooseFontW

advapi32

RegSetValueExW
RegCloseKey
GetSecurityDescriptorSacl
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2550febbfd71519451237fb98da007eb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 20KB

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 20KB

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 44KB - Virtual size: 43KB