9e04f5a466993dbd0dc89a2c59c9d1fa4636da8d6734b74836cd0b018e08d25d

Sharing

Copy URL Twitter E-mail

General

Target

9e04f5a466993dbd0dc89a2c59c9d1fa4636da8d6734b74836cd0b018e08d25d
Size

285KB
MD5

2391e9e018c1594465e66dc7e2a72c80
SHA1

6d4fed398241583aa5353cb03ee995b8a8a9cb1b
SHA256

9e04f5a466993dbd0dc89a2c59c9d1fa4636da8d6734b74836cd0b018e08d25d
SHA512

541b352e42892d4f24c6fd9f0668b354846e641514db77da78ea1880c739baadb2b1d1fd98b32d165258bbd11c9c0d0f943a736baeb1cb02e70045a48aaed35c
SSDEEP

6144:pXtVWDSjyQ2R0EP24q9TsOTPdpUJCBTJTB3lyj3+azo0naG2:p7WDSjf2eEe4q9QOHlTJTZlyz+aPaG2

Score

N/A

Malware Config

Signatures

Files

9e04f5a466993dbd0dc89a2c59c9d1fa4636da8d6734b74836cd0b018e08d25d
.exe windows x86

d69382a139991390581c08eb928f6e74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
malloc
free
time
srand
rand
memcpy
fopen
fread
fwrite
ftell
fseek
fclose
ferror
sprintf
strncpy
memmove
_strnicmp
strncmp
_strdup
_stricmp
strlen
strcpy
strcat
strcmp
memcmp
_wcsicmp
wcsncmp
_wcsnicmp
tolower
fabs
ceil
floor
localtime
mktime
gmtime

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
CloseHandle
HeapFree
SetFileAttributesA
GetFileAttributesA
CreateFileA
SetFileTime
GetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetUserDefaultLCID
GetDiskFreeSpaceExA
FreeLibrary
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CreateThread
HeapAlloc
GetCurrentProcessId
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
PeekNamedPipe
ReadFile
TerminateProcess
SetFilePointer
SetEndOfFile
WriteFile
GetFileSize
Sleep
GetTickCount
HeapReAlloc
GetProcAddress
LoadLibraryA
SetLastError
GetVersionExA
TlsAlloc
MulDiv
GetDriveTypeA
FindFirstFileA
FindClose
GetTempPathA
CreateDirectoryA
GetLastError
FindNextFileA
DeleteFileA
RemoveDirectoryA
SetCurrentDirectoryA
CopyFileA
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock

user32

SendMessageA
SetWindowsHookExA
MessageBoxA
SetWindowTextA
SetDlgItemTextA
UnhookWindowsHookEx
GetSystemMetrics
InvalidateRgn
OemToCharA
CharToOemA
SetTimer
CharLowerA
CharUpperA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetWindowLongA
SetWindowPos
EnableWindow
EnumWindows
DestroyWindow
ShowWindow
CallWindowProcA
CreateWindowExA
SetWindowLongA
GetParent
GetWindow
GetWindowTextLengthA
GetWindowTextA
ValidateRect
GetWindowRect
MapWindowPoints
InvalidateRect
GetPropA
SetPropA
GetSysColor
RedrawWindow
RemovePropA
GetSysColorBrush
GetClientRect
GetClassNameA
DefWindowProcA
ScreenToClient
GetUpdateRect
IntersectRect
GetDC
InflateRect
ReleaseDC
GetWindowDC
MoveWindow
FillRect
DrawFrameControl
PeekMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
MsgWaitForMultipleObjects
GetMessageA
GetActiveWindow
TranslateAcceleratorA
RegisterClassA
AdjustWindowRectEx
CreateAcceleratorTableA
IsZoomed
IsIconic
GetMenu
SetFocus
GetFocus
EnumChildWindows
PostMessageA
DefFrameProcA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
GetKeyState
SetCapture
GetCursorPos
ReleaseCapture
IsChild
DestroyIcon
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard

gdi32

GetStockObject
SetBkColor
SetTextColor
SetBkMode
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateBrushIndirect
DeleteDC
ExcludeClipRect
CreatePen
MoveToEx
LineTo
CreateDCA
GetObjectA
StretchBlt
GetObjectType
CreateDIBSection
CreateSolidBrush
GetDIBits
BitBlt
CreateBitmap
SetPixel
GetDeviceCaps
CreateFontA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_GetIconSize

imagehlp

MakeSureDirectoryPathExists

shlwapi

PathMatchSpecA

shell32

SHCreateDirectory
ShellExecuteExA

ole32

CoInitialize
RevokeDragDrop

wsock32

closesocket
WSACleanup
WSAStartup

winmm

timeBeginPeriod
timeEndPeriod

Sections

.code
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d69382a139991390581c08eb928f6e74

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

imagehlp

shlwapi

shell32

ole32

wsock32

winmm

Sections

.code Size: 82KB - Virtual size: 82KB

.text Size: 115KB - Virtual size: 115KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 30KB - Virtual size: 33KB

.rsrc Size: 41KB - Virtual size: 41KB

.code
Size: 82KB - Virtual size: 82KB

.text
Size: 115KB - Virtual size: 115KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 30KB - Virtual size: 33KB

.rsrc
Size: 41KB - Virtual size: 41KB