2b6ef718b2e8e188c7ed4708e1ffb6e69dfc448094a36aeae27b9437354a9e3f

Sharing

Copy URL Twitter E-mail

General

Target

2b6ef718b2e8e188c7ed4708e1ffb6e69dfc448094a36aeae27b9437354a9e3f
Size

55KB
MD5

08502d0a65069faff3bf976a166fece0
SHA1

812e3998171bdb23b6b928826641e432c248a3bb
SHA256

2b6ef718b2e8e188c7ed4708e1ffb6e69dfc448094a36aeae27b9437354a9e3f
SHA512

1184faa48277583091178e39ccc3dea4b0711adf4cc31f0ebe59a546303a7fc48b6855fa789706753a9958ea299d870d231f29b8fb69175b5902dba3e4230abe
SSDEEP

1536:yknkSfCUtOTgBUtLk10CqvsaxmtMtNHe:yknkSfZWCoC0Cqvf39e

Score

N/A

Malware Config

Signatures

Files

2b6ef718b2e8e188c7ed4708e1ffb6e69dfc448094a36aeae27b9437354a9e3f
.exe windows x86

52808dc9d3413e8b2b20f741b1c4a829

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
MulDiv
FileTimeToDosDateTime
GetProcAddress
lstrcmpW

imm32

ImmGetHotKey
ImmGetCompositionStringW
ImmGetCompositionFontW
ImmNotifyIME
ImmRequestMessageA
ImmGetCandidateListA
ImmConfigureIMEW
ImmGetIMEFileNameA
ImmConfigureIMEA
ImmGetGuideLineW
ImmDisableIME
ImmGetStatusWindowPos
ImmSetHotKey
ImmDestroySoftKeyboard
ImmGetDescriptionA
ImmShowSoftKeyboard
ImmAssociateContextEx
ImmGetImeMenuItemsA
ImmGetIMEFileNameW
ImmGetRegisterWordStyleA
ImmGetVirtualKey
ImmUnregisterWordA
ImmGetCandidateWindow
ImmGetIMCCSize
ImmGetConversionStatus
ImmSetCompositionFontA
ImmIsUIMessageW
ImmGetCompositionStringA
ImmReleaseContext
ImmLockIMC
ImmLockIMCC
ImmGenerateMessage
ImmEnumRegisterWordW
ImmSetCompositionStringA
ImmGetIMCCLockCount
ImmIsIME
ImmEscapeA
ImmSetCompositionFontW
ImmInstallIMEW
ImmUnlockIMCC
ImmGetOpenStatus

shlwapi

PathIsPrefixA
SHRegWriteUSValueW
StrIsIntlEqualA
StrToIntA
UrlCreateFromPathA
StrSpnA
SHRegQueryInfoUSKeyW
PathIsUNCServerShareW
PathIsRelativeW
StrCSpnA
StrChrA
PathRemoveArgsA
SHRegisterValidateTemplate
SHRegDeleteUSValueW
PathFindSuffixArrayW
PathIsURLW
SHRegSetPathA
StrStrIA
SHRegCreateUSKeyW
UrlIsA
PathMakePrettyA
PathFileExistsW
StrTrimA
StrRStrIA
PathUndecorateA
SHRegGetBoolUSValueW
SHRegSetUSValueW
PathMakeSystemFolderA
SHRegOpenUSKeyA
AssocQueryStringByKeyA
UrlUnescapeW
StrRetToStrA
SHGetInverseCMAP
PathIsRelativeA
SHGetThreadRef
UrlCanonicalizeA
PathSetDlgItemPathW
SHRegDeleteEmptyUSKeyA
StrToIntExW
PathSetDlgItemPathA
PathFindExtensionW
PathIsFileSpecW
UrlUnescapeA
PathGetArgsW
StrDupW
IntlStrEqWorkerW
SHQueryValueExA
PathCommonPrefixW
PathIsLFNFileSpecA

wtsapi32

WTSOpenServerA
WTSVirtualChannelQuery
WTSSendMessageW
WTSVirtualChannelPurgeOutput
WTSQuerySessionInformationW
WTSVirtualChannelClose
WTSDisconnectSession
WTSSendMessageA
WTSFreeMemory
WTSSetUserConfigW
WTSEnumerateSessionsW
WTSTerminateProcess
WTSLogoffSession
WTSSetSessionInformationA
WTSEnumerateProcessesW
WTSEnumerateProcessesA
WTSQueryUserConfigA
WTSWaitSystemEvent

comdlg32

ChooseColorA

user32

ExcludeUpdateRgn
DialogBoxParamW
EnumDisplayDevicesW
SetRectEmpty
EndDialog
IsDialogMessageW
TrackPopupMenu
DdeDisconnect
SetWindowsHookExA
BeginPaint
AnimateWindow
CallWindowProcW
CharLowerBuffA
DdeCreateDataHandle
GetKeyboardState
wvsprintfA
SendNotifyMessageW
SendMessageA
OemKeyScan
IsCharAlphaNumericW
AttachThreadInput
MessageBoxW
IsZoomed
SetMessageQueue

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52808dc9d3413e8b2b20f741b1c4a829

Headers

File Characteristics

Imports

kernel32

imm32

shlwapi

wtsapi32

comdlg32

user32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 12KB

.xdata Size: 7KB - Virtual size: 6KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 12KB

.xdata
Size: 7KB - Virtual size: 6KB