2f17631d065ab34782f3020c0e6b23281afce4a6ca8aa6ac8f6727c4483e51a7

Sharing

Copy URL Twitter E-mail

General

Target

2f17631d065ab34782f3020c0e6b23281afce4a6ca8aa6ac8f6727c4483e51a7
Size

146KB
MD5

540cdd90f6e62e46657a130265e785e0
SHA1

470e719e2a263327d4ef30ae6cce9092312bd822
SHA256

2f17631d065ab34782f3020c0e6b23281afce4a6ca8aa6ac8f6727c4483e51a7
SHA512

1e6c148373ac11435d52087e1e4ee7cf96859817097b82e176795caed0c7c47521f025a1b94efdb9d6aff761c6f3f2f45659eac5d9f929138a53ea6705d74802
SSDEEP

3072:NzrQZV067hKC/sEJMMF76aZevm2RMdZgLQkymX65vJfzV3jrIuttecA:N/80MbES5F7uvm2mdZgLQkf613jrIGYz

Score

N/A

Malware Config

Signatures

Files

2f17631d065ab34782f3020c0e6b23281afce4a6ca8aa6ac8f6727c4483e51a7
.exe windows x86

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
fflush
fputs
wcsncpy
wcscspn
iswprint
fputc
__set_app_type
memset
wcstod
gmtime
__p__fmode
strpbrk
wcstol
isxdigit
fread
__p__commode
towlower
strncmp
setlocale
_amsg_exit
_initterm
_ismbblead
localtime
wcsncmp
isupper
iswalpha
putchar
mktime
strstr
_XcptFilter
wcspbrk
atoi
fprintf
fgets
isalpha
puts
strcpy
iswspace
_exit
_cexit
__setusermatherr
__getmainargs
iswdigit
wcscat
sscanf
sprintf
printf

user32

DrawTextA
TrackPopupMenu
ValidateRect
MessageBoxExW
GetKeyboardType
SetLastErrorEx
GetIconInfo
ShowCaret
GetScrollPos
DialogBoxIndirectParamA
GetClipCursor
SetMenu
IsDialogMessageA
CharUpperBuffW
GetFocus
DestroyWindow
CharNextA
GetAsyncKeyState
LoadImageA
InvalidateRect
KillTimer
TabbedTextOutW
CharUpperA
MoveWindow
InflateRect
DialogBoxIndirectParamW
CharLowerBuffW
DrawAnimatedRects
CreateIconFromResource
GetDoubleClickTime
InternalGetWindowText
GetUserObjectInformationW
GetWindowLongA
IsCharAlphaNumericW
BringWindowToTop
GetWindowTextLengthW
OemToCharBuffA
SwitchToThisWindow
GetActiveWindow
OpenIcon
CheckDlgButton
LoadMenuA
CheckRadioButton
mouse_event
SetScrollInfo
CreateWindowExW
GetWindowModuleFileNameW
GetKeyState
SetDlgItemInt
SetWindowLongA
GetMenuStringA
GetClassNameW
TranslateAcceleratorW
GetWindowRect
InsertMenuA
IsMenu
GetDlgItemTextW
HiliteMenuItem
DrawStateA
GetPropW
TrackPopupMenuEx
LoadStringW
GetMessageA
GetDlgItemInt
MapVirtualKeyW
PostMessageA
DrawMenuBar
RegisterWindowMessageW
SetForegroundWindow
GetDialogBaseUnits
ChildWindowFromPointEx
GetWindowTextW
FindWindowExA
CharNextExA
wsprintfW
SetFocus
CreateIconIndirect
EnableWindow
DialogBoxParamA
RemovePropW
SendMessageA
ReplyMessage
ShowScrollBar
UpdateWindow
GetGUIThreadInfo
TranslateMessage
SendMessageW
LoadCursorA
OpenInputDesktop
GetMessageTime
PostThreadMessageW
GetSysColorBrush
CopyImage
GetSystemMenu
RegisterClassExW
SendDlgItemMessageA
DestroyAcceleratorTable
SetWindowTextW
GrayStringW
RegisterWindowMessageA
SetClassLongW
SendDlgItemMessageW
LockWindowUpdate
CloseDesktop
GetShellWindow
GetCaretBlinkTime
CopyAcceleratorTableW
UnloadKeyboardLayout
GetScrollRange
VkKeyScanW
GetMenuState
CreateAcceleratorTableW
GetParent
SetPropW
GetWindow
FindWindowW
EnableMenuItem
DestroyIcon
GetDlgCtrlID
CopyRect
AppendMenuA
GetTopWindow
DrawTextExW
AdjustWindowRectEx
CharNextW
CallWindowProcW

shlwapi

StrToIntW

kernel32

TlsFree
IsBadStringPtrW
MapViewOfFile
HeapUnlock
GetFileAttributesW
IsBadWritePtr
SetMailslotInfo
GetDateFormatW
lstrcpynW
GetVersionExW
GetModuleHandleA
GlobalAddAtomW
CreateNamedPipeA
GetOverlappedResult
FreeLibrary
SetThreadPriority
TransactNamedPipe
GetSystemWindowsDirectoryA
GetModuleFileNameW
WaitForSingleObject
CopyFileA
CreateNamedPipeW
HeapFree
IsDBCSLeadByte
GetFullPathNameW
SetFilePointer
GlobalUnlock
WaitForSingleObjectEx
GetLocaleInfoA
ClearCommError
SetEvent
SetFileTime
GetModuleHandleW
GetProcessHeap
HeapAlloc
WaitForMultipleObjects
GetComputerNameExW
SetCommBreak
GetVersion
GetSystemDirectoryA
SetUnhandledExceptionFilter
SystemTimeToFileTime
IsBadCodePtr
TerminateThread
FindNextFileA
EnumResourceTypesA
VerSetConditionMask
OpenFileMappingW
GlobalLock
OpenFileMappingA
LocalAlloc
GetCurrentThreadId
IsValidLocale
GetOEMCP
GetSystemWindowsDirectoryW
EnumResourceLanguagesA
CreateWaitableTimerA
GetCommandLineA

comdlg32

PrintDlgExW
ReplaceTextW
GetFileTitleW
GetOpenFileNameA
FindTextW

Exports

Exports

?GenericOutputInfoYSUh@@YGK_KHE[D

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecb1d5427d5dc9ab8b5e36039d4f0549

Headers

File Characteristics

Imports

msvcrt

user32

shlwapi

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 66KB

.data Size: 15KB - Virtual size: 81KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 66KB - Virtual size: 66KB

.data
Size: 15KB - Virtual size: 81KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 2KB - Virtual size: 1KB