f0c2537d19184df19b618276e040a0195c70f35460914a884df2f8bd992c5a53

Sharing

Copy URL Twitter E-mail

General

Target

f0c2537d19184df19b618276e040a0195c70f35460914a884df2f8bd992c5a53
Size

1.2MB
MD5

fab91b8e0f54df0cf1c4972b4038e3bf
SHA1

5a0a111c8c1f04d678e77d76fbbc70ceceb059c0
SHA256

f0c2537d19184df19b618276e040a0195c70f35460914a884df2f8bd992c5a53
SHA512

765c2ff098d85f57039cf8a262a7ac46246d38214f88caa7647397dcb8087db921d05ade8577791d1f264e1213e4affccf5b6991595adbf5b656cf4cc1b4a110
SSDEEP

12288:7C2/u5Zr0yvF/kgyFg9B0gFvtMrFdDtCc8x6vRCH:75/u5Zr0y9/kjmRvtvc3JC

Score

N/A

Malware Config

Signatures

Files

f0c2537d19184df19b618276e040a0195c70f35460914a884df2f8bd992c5a53
.exe windows x86

dd5f80cca8169173bcfae1a87829f384

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA

comctl32

ImageList_Draw
InitCommonControlsEx
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
CreateToolbarEx

gdi32

CreateDIBSection
CreateFontIndirectA
GetDeviceCaps
PatBlt
GetTextExtentPoint32A
Rectangle
SetBkMode
SetTextColor
ExtFloodFill
RoundRect
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
SelectObject
SelectClipRgn
CreateRoundRectRgn
MoveToEx
LineTo
BitBlt
TextOutA
DeleteDC
DeleteObject

kernel32

SetThreadExecutionState
GetModuleFileNameA
GetVersionExA
QueryPerformanceFrequency
LocalFree
FormatMessageA
WideCharToMultiByte
DeleteFileA
GetComputerNameA
GetLocalTime
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
OpenFile
GetSystemInfo
QueryPerformanceCounter
SetThreadPriority
GetThreadPriority
GetCurrentThread
Sleep
GetProcessAffinityMask
GetCurrentProcess
SetCommTimeouts
SetCommState
GetCommState
ReadFile
GetSystemPowerStatus
lstrcpy
lstrlen
GlobalUnlock
GlobalLock
GlobalSize
GetOEMCP
GetACP
GetCPInfo
WriteFile
HeapSize
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
TerminateProcess
ExitProcess
GetSystemTimeAsFileTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetLastError
CreateFileA
DeviceIoControl
CloseHandle
GetEnvironmentVariableA
GetEnvironmentStringsW
LockResource
GetStdHandle
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetFileType
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
SetEndOfFile
CompareStringA
CompareStringW
ClearCommError
SetEnvironmentVariableA

powrprof

CallNtPowerInformation

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

shell32

Shell_NotifyIcon
ShellExecuteA

user32

GetDesktopWindow
WinHelpA
UpdateWindow
SetDlgItemInt
DrawTextExA
ScreenToClient
MoveWindow
GetWindowDC
SendDlgItemMessageA
InvalidateRect
GetDlgItem
EnableWindow
GetMenu
GetSystemMetrics
GetDC
GetSysColorBrush
FillRect
ReleaseDC
KillTimer
GetWindowRect
CreateWindowExA
SetWindowPos
SetTimer
ClientToScreen
TrackMouseEvent
GetDlgItemInt
ReleaseCapture
RegisterClassA
GetDlgItemTextA
EnableMenuItem
SetForegroundWindow
DestroyWindow
LoadMenuA
GetSubMenu
GetCursorPos
DeleteMenu
TrackPopupMenu
PostMessageA
DestroyMenu
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateDialogParamA
ShowWindow
PostQuitMessage
DialogBoxParamA
SetWindowTextA
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
EndDialog
SetDlgItemTextA
OpenClipboard
GetClipboardData
LoadStringA
CloseClipboard
SetCapture
DrawTextA
GetClientRect

winmm

PlaySound

ws2_32

WSACleanup
socket
WSAStartup
gethostbyname
WSAGetLastError
htons
connect
recv
send
closesocket

comdlg32

GetOpenFileNameA

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd5f80cca8169173bcfae1a87829f384

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

powrprof

setupapi

shell32

user32

winmm

ws2_32

comdlg32

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 67KB - Virtual size: 67KB

.text1 Size: 256KB - Virtual size: 256KB

.adata Size: 64KB - Virtual size: 64KB

.data1 Size: 128KB - Virtual size: 128KB

.pdata Size: 256KB - Virtual size: 256KB

.rsrc Size: 360KB - Virtual size: 356KB

.mackt Size: 8KB - Virtual size: 8KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 67KB - Virtual size: 67KB

.text1
Size: 256KB - Virtual size: 256KB

.adata
Size: 64KB - Virtual size: 64KB

.data1
Size: 128KB - Virtual size: 128KB

.pdata
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 360KB - Virtual size: 356KB

.mackt
Size: 8KB - Virtual size: 8KB