62e2eb9f107931c96437eee2e9ee166f3124bffe887d564322044eaa2a5f049f

Sharing

Copy URL Twitter E-mail

General

Target

62e2eb9f107931c96437eee2e9ee166f3124bffe887d564322044eaa2a5f049f
Size

910KB
MD5

062c046d28747afbda275db806b0cb30
SHA1

fa0b48ea09f2f06b0c85a58eeb89109f5ffbcfcc
SHA256

62e2eb9f107931c96437eee2e9ee166f3124bffe887d564322044eaa2a5f049f
SHA512

8617242773755c3e12b9b03b7d318b968952744d2483e688786d3332cc33d809ba1f5b7941ac52a827c1ac018a19ba731d8f1caba2c1eb5516bfc7a418422fee
SSDEEP

6144:NhKczN54BtpML03BPqqYXGjDeE77mKlEmoRz5DNYuSNITFA7/3:6sCtug3BzSsBlyB7Y9mTF+3

Score

N/A

Malware Config

Signatures

Files

62e2eb9f107931c96437eee2e9ee166f3124bffe887d564322044eaa2a5f049f
.exe windows x86

b998bd90cf67590c92f1868fb42014ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
MessageBoxW
SetWindowTextW
SendMessageW
LoadBitmapW
SetLayeredWindowAttributes
GetMessageW
PostMessageW
FindWindowW
TranslateMessage
CreateDialogParamW
DispatchMessageW
EndPaint
SetTimer
GetWindowRect
PostQuitMessage
LoadImageW
GetFocus
GetClientRect
BeginPaint
PtInRect
GetWindowLongW
SystemParametersInfoW
GetDlgItem
SetWindowLongW
EndDialog
SetWindowPos
GetCursorPos
ValidateRect

gdi32

SetBkMode
CreateCompatibleDC
DeleteDC
GetStockObject
StretchBlt
SelectObject

imm32

ImmDisableIME

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

InitCommonControlsEx

kernel32

CompareStringW
CreateFileA
SetEnvironmentVariableA
HeapAlloc
HeapFree
GetProcessHeap
CreateDirectoryW
SetFilePointer
CreateProcessW
GetCurrentProcess
WriteFile
GlobalAlloc
FormatMessageW
GetModuleFileNameW
CreateFileW
ExitThread
GetLastError
SetLastError
GlobalFree
CreateEventW
WaitForMultipleObjects
GetCurrentThreadId
DuplicateHandle
CloseHandle
LocalFree
CreateThread
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
GetModuleHandleW
GetTempPathW
GetProcAddress
GetCurrentProcessId
InterlockedIncrement
InterlockedCompareExchange
Sleep
OpenEventW
FindFirstFileW
FindClose
LocalAlloc
FindNextFileW
MoveFileExW
WaitForSingleObject
CopyFileW
FileTimeToSystemTime
DeleteFileW
SetFileAttributesW
GetSystemDirectoryW
RemoveDirectoryW
CreateMutexW
OpenMutexW
ReleaseMutex
CompareStringA
ReadFile
FlushFileBuffers
HeapReAlloc
GetStartupInfoW
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemTimeAsFileTime
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetFullPathNameW
GetCurrentDirectoryA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetModuleHandleA
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetFileSize

advapi32

OpenProcessToken
GetTokenInformation
LookupAccountSidW
AddAccessAllowedAceEx
InitializeSecurityDescriptor
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
GetSidLengthRequired
SetEntriesInAclW
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl

shell32

SHFileOperationW
SHGetSpecialFolderPathW

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 621KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b998bd90cf67590c92f1868fb42014ed

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

imm32

version

comctl32

kernel32

advapi32

shell32

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 14KB - Virtual size: 25KB

.rsrc Size: 621KB - Virtual size: 624KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 14KB - Virtual size: 25KB

.rsrc
Size: 621KB - Virtual size: 624KB