0a1ee1463487230f4fa7871fe91279fb08b783c4990434f7dc333a9ae30038c1

Sharing

Copy URL Twitter E-mail

General

Target

0a1ee1463487230f4fa7871fe91279fb08b783c4990434f7dc333a9ae30038c1
Size

214KB
MD5

200e5bf012f8174f67b81fa5b0f30b23
SHA1

ef752ae9fd841077f13e28366f97e3b6569f9c6e
SHA256

0a1ee1463487230f4fa7871fe91279fb08b783c4990434f7dc333a9ae30038c1
SHA512

789aaa6a3f7971f148ac3b999ba8ad748ca4c1442e6cb5c5d333219e55c97e78fcee6cffe0245912d22385a903b96695d8f7139231eed42ea72da80470ee9462
SSDEEP

3072:kFzWdjcjuWFo8NkNf59yoY05AYBDLvbsfQygmYeU0lCJTttaEZFzPjpj19nWY/2:+WdBWFo2i59F3BYfQ9eU0lEaOZ9nt/

Score

N/A

Malware Config

Signatures

Files

0a1ee1463487230f4fa7871fe91279fb08b783c4990434f7dc333a9ae30038c1
.exe windows x86

8699e7382ef98a38554c7cc9db22d77d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA

comdlg32

PrintDlgExW
ChooseFontW

msvcrt

wcsncmp
wcstod
fread
_controlfp
__set_app_type
__p__fmode
swscanf
__p__commode
_amsg_exit
_initterm
_acmdln
exit
fgets
_ismbblead
wcsstr
qsort
_XcptFilter
_exit
fputs
wcsrchr
_cexit
__setusermatherr
__getmainargs
wcscoll

user32

DeleteMenu
HiliteMenuItem
DrawFocusRect
LoadBitmapW
SetTimer
GetKeyboardLayoutList
DrawTextExW
MonitorFromPoint
EnumChildWindows
ValidateRect
IsRectEmpty
GetWindow
SetDlgItemInt
AppendMenuA
UpdateWindow
InternalGetWindowText
CreateDialogIndirectParamW
SendMessageTimeoutW
SetScrollPos
OpenInputDesktop
AdjustWindowRect
MessageBoxExW
SetWindowTextA
FindWindowExW
KillTimer
DestroyIcon
EndDialog
RegisterWindowMessageW
SetMenuItemInfoW
LoadStringW
ArrangeIconicWindows
SetLastErrorEx
BeginDeferWindowPos
AttachThreadInput

kernel32

LocalFree
WinExec
GetCurrentThread
GetBinaryTypeW
GetFileType
TlsGetValue
GetCommConfig
SearchPathA
LCMapStringA
GetCommModemStatus
lstrcatW
HeapLock
GetModuleHandleA
CreateNamedPipeA
CreateSemaphoreA
SetHandleCount
ExitThread

gdi32

GetROP2
CreateBitmapIndirect
GetNearestPaletteIndex
StretchBlt
EndPath
GetBitmapBits
SetBkColor
StartDocW
WidenPath
AddFontResourceW
SetTextAlign
Ellipse
BeginPath
GetTextExtentExPointW
GetNearestColor
SetViewportExtEx

Exports

Exports

?InitializeCriticalSectionAndSpinCountHDhdhHGHdhds@@YGKEPA_WG@Z

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.diag_y
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.diag_x
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idat
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.div
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.plus
Size: 1024B - Virtual size: 811B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.minus
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8699e7382ef98a38554c7cc9db22d77d

Headers

File Characteristics

Imports

advapi32

comdlg32

msvcrt

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 175KB - Virtual size: 174KB

.data Size: 2KB - Virtual size: 1KB

.diag_y Size: 512B - Virtual size: 97B

.diag_x Size: 512B - Virtual size: 28B

.idat Size: 512B - Virtual size: 400B

.div Size: 2KB - Virtual size: 2KB

.plus Size: 1024B - Virtual size: 811B

.minus Size: 512B - Virtual size: 140B

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 175KB - Virtual size: 174KB

.data
Size: 2KB - Virtual size: 1KB

.diag_y
Size: 512B - Virtual size: 97B

.diag_x
Size: 512B - Virtual size: 28B

.idat
Size: 512B - Virtual size: 400B

.div
Size: 2KB - Virtual size: 2KB

.plus
Size: 1024B - Virtual size: 811B

.minus
Size: 512B - Virtual size: 140B

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 2KB - Virtual size: 1KB