1139b82f063b626988078e43992ca7413fdc9a2a894032448aae85233c58198c

Sharing

Copy URL Twitter E-mail

General

Target

1139b82f063b626988078e43992ca7413fdc9a2a894032448aae85233c58198c
Size

145KB
MD5

0d2b0caaa7ee0679bf0b04ee464daef0
SHA1

b1bfc7a3b750f8d2a8cc836b69dcdad57d661e48
SHA256

1139b82f063b626988078e43992ca7413fdc9a2a894032448aae85233c58198c
SHA512

5917ce32a0a673170229ed09a6b34c68f14a78c6b544759cfe7f951e6e95a0443a8c64decbe557917b32a1c4de2c096cd3ed7021596989bb0343427bd19104e9
SSDEEP

3072:9Jq72LJa4f9y8jMgFHXd3zxzQFqM3cTkDsVamJv7LxShXY6D2tklsrl:9ha4fY8Ht2FZnDd8vhShXtckl4

Score

N/A

Malware Config

Signatures

Files

1139b82f063b626988078e43992ca7413fdc9a2a894032448aae85233c58198c
.exe windows x86

13aa3fca81f272754fdaa7677fd39dfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
ReadFile
WriteFile
GetFileSize
CloseHandle
HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
GetDateFormatA
FindResourceA
FindResourceW
LoadResource
SizeofResource
FreeResource
RtlUnwind
lstrcpynA
FindFirstFileW
FindNextFileW
FindClose
CreateProcessW
LocalAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
TlsAlloc
TlsGetValue
TlsFree
lstrlenW
SetEndOfFile
TlsSetValue
GetVersion
CreateEventA
SetEvent
ResetEvent
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LockResource
GlobalUnlock
GetStartupInfoA
SetFilePointer
GetDriveTypeA
CopyFileA
GetACP
LCMapStringW
lstrcmpiW
GetFullPathNameA
GetTempPathW
CreateFileMappingA
GetFileType
FindFirstFileA
FindNextFileA
FlushFileBuffers
InterlockedCompareExchange
GetFileTime
VirtualProtect
GetShortPathNameA
MulDiv
lstrcmpA
GetModuleFileNameW
SetStdHandle
SetUnhandledExceptionFilter
SetFileTime
CreateMutexA
ReleaseMutex
OpenMutexA
GlobalReAlloc
CreateThread
GetCurrentThreadId
ResumeThread
ExitThread
TerminateThread
CreateProcessA
UnmapViewOfFile
MapViewOfFile
DeleteFileA
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
GetProcAddress
GetConsoleOutputCP
VirtualFree
GetEnvironmentStrings
GetCurrentThread
SetThreadPriority
GetExitCodeThread
GetCurrentDirectoryA
SetFileAttributesW
OutputDebugStringA
GetSystemInfo
GetConsoleMode
GetCommandLineW
CreateEventW
GetLocaleInfoA
GetLastError
RemoveDirectoryA
GetModuleHandleW
GetSystemDirectoryW
VirtualAlloc

msvcrt

isdigit
__dllonexit
_strdup
free
towlower
_errno
vsprintf
_umask
isxdigit
strncpy
atof
signal
_snprintf
strcmp
_cexit
_adjust_fdiv
printf
puts
strncat
clock
localtime
swprintf
isspace
_flsbuf
_ftol
_lock
clearerr
strspn
_acmdln
_mbscmp
toupper
strtok
_read
wcsrchr
_setmode
_CIsqrt
_wcsicmp
fputc
_fileno
_fullpath
longjmp
_ismbblead
getenv
fgets
_open
_mkdir
_lseeki64
strrchr
_kbhit
realloc
_controlfp
ungetc
malloc
memcpy
_open_osfhandle
fread
_isatty
log
atoi
memchr
sscanf
_setjmp3
_wcsupr
time
fseek
_utime
wcschr
_strlwr
wcscmp
__badioinfo
wcstombs
sprintf
_mbsrchr
__p__commode
_fdopen
srand
_write
putchar
_initterm
wcsncpy
_close
_stricmp
calloc
_stat
fwrite
cos
_getch
iswctype
__p___initenv
towupper
wcstoul
strerror
wcscat
_except_handler3
atol
sqrt
_setjmp
fopen
remove
strlen
strcpy
iswspace
fprintf
_dup
bsearch
strpbrk
fclose
__CxxFrameHandler
_vsnprintf
memcmp
atexit
_filelengthi64
_itow
_purecall
__mb_cur_max
wcslen
_unlock
strcat
_amsg_exit
_osver
abort
_beginthreadex
_wcslwr
_snwprintf
_filbuf
__p__fmode
_lseek
strcspn
_exit
_ultoa
fgetpos
_unlink
_pipe
memmove
strchr
isleadbyte
_putenv
fgetc
__lc_codepage
setlocale
_wtol
_fstat
_strnicmp
fsetpos
rename
_mbsicmp
_vsnwprintf
_wfopen
_iob
_assert
__initenv
_getpid
_onexit
strtoul
rand
__setusermatherr
fputs
_strcmpi
rewind
__p__environ
wcsncmp
_wcsnicmp
pow
gmtime
wctomb
strstr
ctime
ftell
_dup2
__getmainargs
qsort
wcscspn
__set_app_type
_mktemp
memset
wcstol
_itoa
exit
tolower
sin
floor
wcsstr
_pctype
swscanf
_XcptFilter
ceil
_CIpow
strtol
iswdigit
_getcwd
_chmod
_wtoi
localeconv

user32

DestroyIcon
GetCursorPos
DestroyWindow
ShowWindow
PostMessageA
EnumThreadWindows
CharNextA
GetKeyboardType
EnableMenuItem
CharLowerA
GetScrollPos
LoadCursorA
ClientToScreen
ScreenToClient
DefWindowProcA
GetMenuItemCount
EnableWindow
GetMenu
DrawMenuBar
SetCapture
OemToCharA
MessageBoxA
GetTopWindow
GetParent
GetDC
SetCursor
RegisterClipboardFormatA
LoadBitmapA
SetActiveWindow
DrawFrameControl
IsWindowEnabled
FindWindowA
DispatchMessageA
AdjustWindowRectEx
CheckMenuItem
GetMessagePos
EqualRect
SetClipboardData
SetTimer
OffsetRect
IsChild
SetWindowsHookExA
GetMenuStringA
GetWindow
MessageBeep
SystemParametersInfoA
GetFocus
SendDlgItemMessageA
DialogBoxParamA
DestroyMenu
GetWindowDC
EndDialog
GetCapture
IsIconic
GetClientRect
IntersectRect
IsZoomed
ReleaseDC
ReleaseCapture
PeekMessageA
GetWindowPlacement
WindowFromPoint
GetSystemMenu
GetClassNameA
RegisterWindowMessageA
GetDlgItem
wsprintfA
DestroyCursor
GetLastActivePopup
SetWindowTextA
DrawEdge
ScrollWindow
GetSysColor
WaitMessage
EmptyClipboard
SendMessageA
FrameRect
OpenClipboard
GetActiveWindow
KillTimer
GetWindowRect
UpdateWindow
GetForegroundWindow
RedrawWindow
WinHelpA
CallWindowProcA
SetScrollPos
DrawIconEx
InsertMenuA
TranslateMessage
DrawIcon
CreateWindowExA
BeginPaint
SetForegroundWindow
GetIconInfo
SetWindowPos
GetSubMenu
GetKeyState
MapWindowPoints
IsDialogMessageA
CloseClipboard
RemoveMenu
InflateRect
CreatePopupMenu
DrawTextA
PtInRect
UnhookWindowsHookEx
SetWindowPlacement
ShowCursor
GetSystemMetrics
EnumWindows
GetPropA
GetWindowThreadProcessId
TrackPopupMenu
SetScrollRange
InvalidateRect
GetSysColorBrush
GetMessageA
GetMenuState
FillRect
IsRectEmpty
SetMenu
SetWindowLongA
SetFocus
LoadIconA
SetRect
SetScrollInfo
LoadStringA
SetClassLongA
IsWindowVisible
GetScrollInfo
RemovePropA
InsertMenuItemA
SetPropA
EndPaint
RegisterClassA
CreateMenu
GetDCEx
IsWindow
GetDesktopWindow

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13aa3fca81f272754fdaa7677fd39dfb

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 1024B - Virtual size: 4KB