77197c49f2817def67d25e6e0f9774f292d29263edf944444a04468d1af5f852

Sharing

Copy URL Twitter E-mail

General

Target

77197c49f2817def67d25e6e0f9774f292d29263edf944444a04468d1af5f852
Size

288KB
MD5

0b56f7af0d6a9bcd88ab701232b8d352
SHA1

158218482616bf90f0611b6b52695d70e7911d8c
SHA256

77197c49f2817def67d25e6e0f9774f292d29263edf944444a04468d1af5f852
SHA512

0f605bad825e2f0590ddf61ad9c6ecf91fbbcbb70901d6ed86c4274ae4e4cede39e65df5575cbcdbe82f4573396c9938648e3149550529d3201d5d2b3e0ec0e6
SSDEEP

6144:wCYKfoMnJFYO6iuv4bh0sbeLJhGPRDvIUOhAQm4yF3nI:pFxnuv4d0sb9TI1hMFnI

Score

N/A

Malware Config

Signatures

Files

77197c49f2817def67d25e6e0f9774f292d29263edf944444a04468d1af5f852
.exe windows x86

2b772f4c334146eedc984d917290b784

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHGetDesktopFolder
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

GetTickCount
MultiByteToWideChar
lstrlenA
GetLocalTime
WriteFile
SetFilePointer
ReadFile
CreateFileA
WideCharToMultiByte
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
OpenFile
LoadLibraryA
GetSystemDirectoryA
MulDiv
GetDiskFreeSpaceA
FreeLibrary
GetFullPathNameA
GetFileSize
WritePrivateProfileStringA
GetCurrentProcessId
GetVersionExA
GetWindowsDirectoryA
DeleteFileA
lstrcpyA
CreateThread
CreateEventA
WaitForSingleObject
ResetEvent
FreeResource
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
SetEvent
CreateSemaphoreA
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
GetCurrentThread
WaitForMultipleObjects
GetDiskFreeSpaceExA
GetCurrentDirectoryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
IsBadWritePtr
VirtualAlloc
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
CreateMutexA
GetLastError
CloseHandle
Sleep
GetModuleFileNameA
GetPrivateProfileIntA
GetACP
GetPrivateProfileStringA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
SetPriorityClass
lstrcpynA
lstrcatA
SetCurrentDirectoryA

user32

MsgWaitForMultipleObjects
MessageBoxExA
AdjustWindowRectEx
GetWindowTextA
BeginPaint
EndPaint
GetSysColor
GetDesktopWindow
DestroyWindow
BringWindowToTop
SetWindowPos
SetWindowPlacement
LockWindowUpdate
SetRect
GetSystemMetrics
SetWindowLongA
GetWindowLongA
GetWindowPlacement
SetMenu
GetMenu
ShowWindow
SetWindowTextA
RemoveMenu
GetMenuItemCount
GetSubMenu
CreateWindowExA
wvsprintfA
GetDC
RegisterClassA
LoadIconA
LoadCursorA
LoadAcceleratorsA
WaitMessage
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextA
IsCharAlphaA
IsCharAlphaNumericA
GetDlgItemInt
SetDlgItemInt
GetDlgItem
SetFocus
MessageBeep
EnableWindow
UpdateWindow
EndDialog
SetDlgItemTextA
MessageBoxA
DialogBoxParamA
GetMenuStringA
PostThreadMessageA
GetQueueStatus
ReleaseDC
PeekMessageA
CheckRadioButton
SetTimer
RegisterWindowMessageA
DefWindowProcA
wsprintfA
CheckMenuItem
EnableMenuItem
SetForegroundWindow
SetActiveWindow
DestroyMenu
GetMenuItemID
InsertMenuA
AppendMenuA
CreatePopupMenu
InvalidateRect
GetWindowRect
KillTimer
PostMessageA
GetClientRect
MoveWindow
PostQuitMessage
GetAsyncKeyState
GetCursorPos
LoadMenuA
TrackPopupMenu

gdi32

ExtTextOutA
SetTextColor
DeleteObject
SetBkColor
GetDeviceCaps
CreateSolidBrush
CreateFontA
GetStockObject
SelectObject
PatBlt
GetTextMetricsA

comdlg32

GetOpenFileNameA

ole32

CreateStreamOnHGlobal
IIDFromString
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
CoTaskMemAlloc

winmm

mixerOpen
timeGetTime
mixerGetDevCapsA
mixerGetNumDevs
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetControlDetailsA
mixerSetControlDetails
sndPlaySoundA
timeSetEvent

msacm32

acmFormatChooseA
acmMetrics

olepro32

ord251
ord250

oleaut32

SysFreeString
SysAllocString

advapi32

RegCreateKeyA
RegNotifyChangeKeyValue
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathFileExistsA

gdiplus

GdipDisposeImage
GdipLoadImageFromFile
GdiplusStartup
GdipSaveImageToStream
GdipFree
GdipAlloc
GdipCloneImage
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize

Sections

.text
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2b772f4c334146eedc984d917290b784

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

comdlg32

ole32

winmm

msacm32

olepro32

oleaut32

advapi32

shlwapi

gdiplus

Sections

.text Size: 140KB - Virtual size: 137KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 20KB - Virtual size: 28KB

.rsrc Size: 16KB - Virtual size: 15KB

.prdata Size: 68KB - Virtual size: 68KB

.text
Size: 140KB - Virtual size: 137KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 20KB - Virtual size: 28KB

.rsrc
Size: 16KB - Virtual size: 15KB

.prdata
Size: 68KB - Virtual size: 68KB