64238cd5ecbe797ebea9eaa90000f96146dbab085a61f132d443d1a5ebf3fe32

Sharing

Copy URL

Twitter E-mail

General

Target

64238cd5ecbe797ebea9eaa90000f96146dbab085a61f132d443d1a5ebf3fe32
Size

298KB
MD5

bc54868a08a7d4336922e40b3d18abc5
SHA1

f3221a414b42524d546cf51c18b0f8f239666167
SHA256

64238cd5ecbe797ebea9eaa90000f96146dbab085a61f132d443d1a5ebf3fe32
SHA512

d75204155b8f42e382ce9641216a02b28b0d2a52df7af0b4fc09988150fb92e166b70662baaf43d9f11d41b99096d35f6b10521f384b95bed3b7e5ea0465b667
SSDEEP

6144:MIWOkp0pvb3FQSV68oPiNLF2Y3iDczBR2TG9UD2NNasWfou:hWOkp0pTV/6fPk2Y3iDc94yu2as

Score

N/A

Malware Config

Signatures

Files

64238cd5ecbe797ebea9eaa90000f96146dbab085a61f132d443d1a5ebf3fe32
.exe windows x86

687b53bd530e85d635f5d7d593a176a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetStringTypeW
LCMapStringW
Sleep
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileW
RtlUnwind
GetFileType
SetHandleCount
SetFilePointer
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
HeapCreate
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindCloseChangeNotification
WriteConsoleW
IsProcessorFeaturePresent
GetProcAddress
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
FlushFileBuffers
CreateFileA
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
lstrcpyA
CloseHandle
GetVersionExA
FindFirstChangeNotificationA
FindNextFileA
GetModuleFileNameA
FindNextChangeNotification
WritePrivateProfileStringA
GetPrivateProfileStringA
FindClose
lstrcmpiA
GetLastError
FindFirstFileA
GlobalUnlock
MultiByteToWideChar
lstrcatA
GetVersionExW
CreateEventA
GlobalAlloc
GetModuleFileNameW
InitializeCriticalSection
WaitForSingleObject
lstrlenA
GlobalLock
QueryPerformanceCounter
GetCurrentProcess
HeapAlloc
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
HeapFree
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
ReadFile

user32

GetClipboardData
GetWindow
GetWindowThreadProcessId
CopyRect
CheckMenuItem
SetDlgItemTextA
DrawFrameControl
SetWindowTextW
GetDlgItemTextA
EndPaint
DestroyWindow
GetMessageA
CloseClipboard
GetSystemMenu
GetWindowRect
PostQuitMessage
SendDlgItemMessageA
IsIconic
SetClipboardData
GetSubMenu
LoadStringA
DialogBoxParamW
GetWindowInfo
GetClientRect
SendMessageA
BeginPaint
GetDC
DrawFocusRect
MessageBoxA
InvalidateRect
GetWindowLongA
DrawTextW
CreateWindowExA
ReleaseDC
EnableMenuItem
EmptyClipboard
GetDlgItem
DefWindowProcA
GetSysColor
SetWindowPos
CheckDlgButton
ShowWindow
IsDlgButtonChecked
IsWindow
DispatchMessageA
CheckRadioButton
OpenClipboard
MessageBoxW
IsWindowVisible
SetWindowTextA
SendMessageW
MapWindowPoints
UpdateWindow

gdi32

SetWindowOrgEx
EnumFontFamiliesW
PatBlt
SetViewportOrgEx
SetWindowExtEx
SetTextColor
DeleteDC
StretchBlt
SetBkColor
CreateMetaFileA
GetRgnBox
UnrealizeObject
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
SetMapMode
CreateCompatibleBitmap
Rectangle
RealizePalette
CreateFontW
SelectPalette
CreateRectRgn
CreatePen
GetTextMetricsA
ExtTextOutA
CloseMetaFile
CreateSolidBrush
CreateEllipticRgn

comdlg32

PageSetupDlgW

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetMalloc
SHBrowseForFolderW
CommandLineToArgvW
SHGetPathFromIDListW

ole32

CoCreateInstance

oleaut32

VariantInit
RegisterActiveObject
SafeArrayCreate
VariantClear
SysStringLen

shlwapi

PathFileExistsW
ColorRGBToHLS
PathIsDirectoryW

comctl32

ImageList_GetIconSize

opengl32

wglDeleteContext
wglMakeCurrent
wglCreateContext

dbghelp

SymInitialize
SymSetOptions
SymCleanup
SymEnumSymbols

oleacc

CreateStdAccessibleObject

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

687b53bd530e85d635f5d7d593a176a4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

opengl32

dbghelp

oleacc

wtsapi32

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 150KB - Virtual size: 157KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 150KB - Virtual size: 157KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 10KB - Virtual size: 9KB