b84e41c52c790c489cd623b33736f48d49331b1a4155721f8e683ecbe5f4f216

Sharing

Copy URL Twitter E-mail

General

Target

b84e41c52c790c489cd623b33736f48d49331b1a4155721f8e683ecbe5f4f216
Size

292KB
MD5

20ed103023ee2b10df0bdc78e31731b0
SHA1

c71714d7e27e7bbdc917d828d2151e9ccb264f5f
SHA256

b84e41c52c790c489cd623b33736f48d49331b1a4155721f8e683ecbe5f4f216
SHA512

af623a8093dda7f9f48cf61cacc637d4c3ca3a23a036bcbd5a9625edbfe29d3ca5bf558b75e0c0e338ba938883d7c0ae67e25c7f345360150873bf2f12bf9cca
SSDEEP

6144:zRPOsIw0EdMSjvBtFWrb8eei8NLLTBM1dnVM3jV577:zRPX0mjvFW07LLT4Mx577

Score

N/A

Malware Config

Signatures

Files

b84e41c52c790c489cd623b33736f48d49331b1a4155721f8e683ecbe5f4f216
.exe windows x86

378d69b44f0d5f2ba698fa2fa1e724ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
CreateProcessA
GetPrivateProfileStringA
WaitForSingleObject
CreateThread
GetLongPathNameA
LoadLibraryA
GetProcAddress
GetTickCount
lstrcmpA
Sleep
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
WideCharToMultiByte
GetLocalTime
WinExec
ExitProcess
FindResourceA
SizeofResource
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetOEMCP
GetACP
LoadResource
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
ReadFile
GetStringTypeW
GetStringTypeA
CreateFileA
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
SetUnhandledExceptionFilter
WriteFile
HeapSize
TerminateProcess
HeapReAlloc
GetVersion
GetCommandLineA
GetStartupInfoA
RaiseException
GetSystemTime
GetTimeZoneInformation
RtlUnwind
LockResource
FreeResource
GetModuleHandleA
GetModuleFileNameA
GlobalFree
GlobalAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetEnvironmentVariableA
InterlockedIncrement
InterlockedDecrement
lstrlenA
MultiByteToWideChar
LocalFree
OutputDebugStringA
CreateMutexA
GetLastError
ReleaseMutex
GetCPInfo
CloseHandle
DeleteCriticalSection
GetFileAttributesA

user32

SendMessageA
CallWindowProcW
GetPropA
CallNextHookEx
SetPropA
GetParent
GetClassNameA
RegisterWindowMessageA
SetTimer
KillTimer
UnhookWindowsHookEx
InvalidateRect
DefWindowProcW
GetWindowRect
EnumChildWindows
PostMessageA
GetDoubleClickTime
WindowFromPoint
GetAsyncKeyState
GetCursorPos
SystemParametersInfoA
GetWindowTextA
UnregisterClassA
DefWindowProcA
ReleaseDC
GetDC
CallWindowProcA
TrackMouseEvent
EndPaint
GetDesktopWindow
SetWindowLongW
BeginPaint
MapWindowPoints
GetClientRect
TranslateMessage
SetWindowsHookExA
SetWindowTextA
SetCursor
DestroyWindow
PostQuitMessage
IsZoomed
FillRect
GetWindowLongA
DrawTextA
DrawIconEx
IsWindowEnabled
OffsetRect
DestroyIcon
GetMessageA
ShowWindow
RemovePropA
LoadImageA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageW
DispatchMessageA

gdi32

GetTextExtentPoint32A
CreateFontA
SetTextColor
StretchBlt
BitBlt
CreateSolidBrush
SetBkMode
CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC
GetBitmapBits
GetObjectA

advapi32

RegCreateKeyA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHChangeNotify

ole32

CoCreateInstance
StgCreateDocfile
OleCreate
OleInitialize
OleUninitialize
CoInitialize
CoUninitialize

oleaut32

SafeArrayDestroy
VariantInit
VariantCopy
SysStringByteLen
SafeArrayCreate
SafeArrayPutElement
VarCmp
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysFreeString
SysAllocString
VariantClear

urlmon

URLDownloadToFileA

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA
DeleteUrlCacheEntry

msimg32

AlphaBlend

comctl32

InitCommonControlsEx

ws2_32

shutdown
send
ioctlsocket
connect
select
__WSAFDIsSet
inet_ntoa
gethostbyname
htons
recv
inet_addr
WSACleanup
setsockopt
WSAGetLastError
closesocket
WSAStartup
socket

shlwapi

UrlUnescapeA
StrStrIA

iphlpapi

GetPerAdapterInfo
GetIpAddrTable
GetAdaptersInfo

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

378d69b44f0d5f2ba698fa2fa1e724ac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

urlmon

wininet

msimg32

comctl32

ws2_32

shlwapi

iphlpapi

Sections

.text Size: 216KB - Virtual size: 215KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 28KB - Virtual size: 54KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 216KB - Virtual size: 215KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 28KB - Virtual size: 54KB

.rsrc
Size: 16KB - Virtual size: 13KB