2151f49f91c705317bc2e80d17e476f9cf517b84ca80e062b3bd54309be74ec3

Sharing

Copy URL

Twitter E-mail

General

Target

2151f49f91c705317bc2e80d17e476f9cf517b84ca80e062b3bd54309be74ec3
Size

414KB
MD5

755972ae4a8ac424ee07c795d090a3a7
SHA1

2edfe5d924baf3aca5c109f2436b972018bbaeb7
SHA256

2151f49f91c705317bc2e80d17e476f9cf517b84ca80e062b3bd54309be74ec3
SHA512

61ffb0d6b45c0077d663a60fef80a04901689fcd6bff3173ab77eaa4f5462cb3e64ee92df24d4f1097d68fd6843ae40f27324252476c4febe7a6c1394a5ce5ac
SSDEEP

6144:rgrtzi+hNe6C2afXdiVmmK2NoXEmtho30nuQdSrJ95Z3y5Szg:rKtl/UhfXdiVQ2SENkntdSrJ95Z3

Score

N/A

Malware Config

Signatures

Files

2151f49f91c705317bc2e80d17e476f9cf517b84ca80e062b3bd54309be74ec3
.exe windows x86

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenW
InternetConnectW
InternetOpenUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile

comctl32

InitCommonControlsEx

winmm

timeSetEvent

kernel32

CreateThread
WaitForMultipleObjects
CreateEventW
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
HeapAlloc
GetCPInfo
HeapReAlloc
LoadLibraryExW
ExitThread
GetCurrentThreadId
GetLastError
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetFileAttributesW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
ReadConsoleW
OutputDebugStringW
SetEndOfFile
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
DecodePointer
EncodePointer
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection

user32

SetPropW
DispatchMessageW
LoadStringW
DestroyIcon
LoadIconW
SetCursorPos
MessageBoxW
GetWindowRect
SetWindowTextW
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
GetPropW
TranslateMessage
GetMessageW
LoadCursorW
GetSysColor
SetCursor
RemovePropW
InvalidateRect
CallWindowProcW
SystemParametersInfoW
EnumWindows
GetParent
SetWindowLongW
GetWindowLongW
GetClientRect
GetWindowTextW
ReleaseDC
GetDC
CreateWindowExW
PostMessageW
SendMessageW

gdi32

SetTextColor
GetStockObject
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW

comdlg32

GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHCreateDirectoryExW

ole32

CoInitialize

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

File Characteristics

Imports

wininet

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 324KB - Virtual size: 324KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 324KB - Virtual size: 324KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 7KB - Virtual size: 7KB