f87f46a98e545ab1480a3bcd2ac86d0e3519058d054fd47e31b6fe9461b0e330

Sharing

Copy URL Twitter E-mail

General

Target

f87f46a98e545ab1480a3bcd2ac86d0e3519058d054fd47e31b6fe9461b0e330
Size

193KB
MD5

093157848107f2897f8e0b558feb08c0
SHA1

4062fb88d7bc6176244f5a834dc8f54f7a8a0dbe
SHA256

f87f46a98e545ab1480a3bcd2ac86d0e3519058d054fd47e31b6fe9461b0e330
SHA512

c3c3c66d02fa18f5e6791c379cfef2cf23ae774ecd471a45a994c6cb3a4061da3fea4ddbb77669c98544b8667d1f5c0727330572bbf0d7e548d841b9b74efcd0
SSDEEP

3072:KYqfHbhq0/DeP+DZpFB+2xmh0QSoKKBlKxyAZEHzoHuoBum6F:KP7h5KP+ts2xmhfGKraEHjlm6F

Score

N/A

Malware Config

Signatures

Files

f87f46a98e545ab1480a3bcd2ac86d0e3519058d054fd47e31b6fe9461b0e330
.exe windows x86

6445f6d3fcb90f4f27d8d6bf6dd768f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetValueW
TraceMessage
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
TraceEvent
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
RegQueryValueExW

kernel32

OpenEventW
SetThreadExecutionState
CreateFileW
lstrcmpiW
GetCommandLineW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesW
GetWindowsDirectoryW
CreateEventW
CloseHandle
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
CreateMutexW
RegisterApplicationRestart
ReleaseMutex
GetLastError
LocalFree
HeapSetInformation
lstrlenW
UnhandledExceptionFilter

gdi32

DeleteObject

user32

AllowSetForegroundWindow
SetForegroundWindow
LoadStringW
SetTimer
GetDoubleClickTime
FindWindowW
KillTimer
UnregisterClassW
CreateWindowExW
LoadIconW
GetCursorPos
PostMessageW
GetSystemMetrics
GetClientRect
EndDialog
DestroyIcon
GetFocus
GetForegroundWindow
SendDlgItemMessageW
IsDlgButtonChecked
GetDlgItem
LoadImageW
EnableWindow
GetSysColor
SendMessageW
GetWindowLongA
SetWindowLongA
EnableScrollBar
DestroyMenu
TrackPopupMenuEx
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
CheckDlgButton
EndMenu
SystemParametersInfoW
SendMessageTimeoutW
DialogBoxParamW
DefWindowProcW
RegisterClassExW
AppendMenuW
SetMenuDefaultItem
RegisterWindowMessageW
DestroyWindow
CreatePopupMenu

msvcrt

_amsg_exit
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memcpy
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_cexit
__getmainargs
_ftol2
_vsnwprintf
wcsncmp
memset

winmm

PlaySoundW
waveOutGetNumDevs

shell32

CommandLineToArgvW
ord100
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetFolderPathW
Shell_NotifyIconW

gdiplus

GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipDrawImageRectI
GdipCloneBrush
GdipCloneImage
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipFree
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageThumbnail
GdipGetImageWidth

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

comctl32

ImageList_Destroy
ImageList_Remove
ord345
ImageList_ReplaceIcon
ImageList_Create
ord344

comdlg32

GetOpenFileNameW

shlwapi

ord271
ord618
PathCombineW
PathMakePrettyW
PathFindExtensionW
PathFindFileNameW
PathAppendW
StrChrW
PathRemoveExtensionW
ord158

powrprof

PowerDeterminePlatformRole
GetPwrCapabilities

slc

SLGetWindowsInformationDWORD

oleaut32

SysAllocString
SysFreeString
VariantInit

secur32

GetUserNameExW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6445f6d3fcb90f4f27d8d6bf6dd768f7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

winmm

shell32

gdiplus

ole32

comctl32

comdlg32

shlwapi

powrprof

slc

oleaut32

secur32

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 106KB - Virtual size: 106KB

.reloc Size: 30KB - Virtual size: 31KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 106KB - Virtual size: 106KB

.reloc
Size: 30KB - Virtual size: 31KB