8113812f15d7c47e7fe4408f8cca5154f42c4e38ca9a88cc4fd4190915c813f6

Sharing

Copy URL

Twitter E-mail

General

Target

8113812f15d7c47e7fe4408f8cca5154f42c4e38ca9a88cc4fd4190915c813f6
Size

414KB
MD5

54a8ba95f43b97952d06c8213169bd8c
SHA1

b63db415ac40c5a7122ff190044062e0cc9ec078
SHA256

8113812f15d7c47e7fe4408f8cca5154f42c4e38ca9a88cc4fd4190915c813f6
SHA512

1d289088535a87495e998ad2a8c997938c1bf09e141dabe3d64f429cdac0d0558e1b28deeb35c627e89faed1f3c60894ee0824034297e78fade49500bc766705
SSDEEP

6144:rgrtzi+hNe6C2afXdiVmmK2NoXEmtho30nuQdIrJ95Z3y5Szg:rKtl/UhfXdiVQ2SENkntdIrJ95Z3

Score

N/A

Malware Config

Signatures

Files

8113812f15d7c47e7fe4408f8cca5154f42c4e38ca9a88cc4fd4190915c813f6
.exe windows x86

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenW
InternetConnectW
InternetOpenUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile

comctl32

InitCommonControlsEx

winmm

timeSetEvent

kernel32

CreateThread
WaitForMultipleObjects
CreateEventW
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
HeapAlloc
GetCPInfo
HeapReAlloc
LoadLibraryExW
ExitThread
GetCurrentThreadId
GetLastError
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetFileAttributesW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
ReadConsoleW
OutputDebugStringW
SetEndOfFile
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
DecodePointer
EncodePointer
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection

user32

SetPropW
DispatchMessageW
LoadStringW
DestroyIcon
LoadIconW
SetCursorPos
MessageBoxW
GetWindowRect
SetWindowTextW
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
GetPropW
TranslateMessage
GetMessageW
LoadCursorW
GetSysColor
SetCursor
RemovePropW
InvalidateRect
CallWindowProcW
SystemParametersInfoW
EnumWindows
GetParent
SetWindowLongW
GetWindowLongW
GetClientRect
GetWindowTextW
ReleaseDC
GetDC
CreateWindowExW
PostMessageW
SendMessageW

gdi32

SetTextColor
GetStockObject
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW

comdlg32

GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHCreateDirectoryExW

ole32

CoInitialize

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

File Characteristics

Imports

wininet

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 324KB - Virtual size: 324KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 324KB - Virtual size: 324KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 7KB - Virtual size: 7KB