498d324d64c9c86db04fc609c2fb937acc916c710316cad1c0ca5607feeb7d4d

Sharing

Copy URL

Twitter E-mail

General

Target

498d324d64c9c86db04fc609c2fb937acc916c710316cad1c0ca5607feeb7d4d
Size

414KB
MD5

bd71fd1a4f375f68f75772b734a7c8c6
SHA1

ce518eedbb39b97019248b75c39172f0b966ca66
SHA256

498d324d64c9c86db04fc609c2fb937acc916c710316cad1c0ca5607feeb7d4d
SHA512

0045c9bffe07df46f155449e080e6b3b1841f4b0d665676a27d5940638cd063e7fb2d63796aba884e55aec3d5af5a82eb580ffec94cfb8ab7cfef6521ee3c1a2
SSDEEP

6144:rgrtzi+hNe6C2afXdiVmmK2NoXEmtho30nuQdbrJ95Z3y5Szg:rKtl/UhfXdiVQ2SENkntdbrJ95Z3

Score

N/A

Malware Config

Signatures

Files

498d324d64c9c86db04fc609c2fb937acc916c710316cad1c0ca5607feeb7d4d
.exe windows x86

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenW
InternetConnectW
InternetOpenUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile

comctl32

InitCommonControlsEx

winmm

timeSetEvent

kernel32

CreateThread
WaitForMultipleObjects
CreateEventW
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
HeapAlloc
GetCPInfo
HeapReAlloc
LoadLibraryExW
ExitThread
GetCurrentThreadId
GetLastError
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetFileAttributesW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
ReadConsoleW
OutputDebugStringW
SetEndOfFile
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
DecodePointer
EncodePointer
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection

user32

SetPropW
DispatchMessageW
LoadStringW
DestroyIcon
LoadIconW
SetCursorPos
MessageBoxW
GetWindowRect
SetWindowTextW
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
GetPropW
TranslateMessage
GetMessageW
LoadCursorW
GetSysColor
SetCursor
RemovePropW
InvalidateRect
CallWindowProcW
SystemParametersInfoW
EnumWindows
GetParent
SetWindowLongW
GetWindowLongW
GetClientRect
GetWindowTextW
ReleaseDC
GetDC
CreateWindowExW
PostMessageW
SendMessageW

gdi32

SetTextColor
GetStockObject
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW

comdlg32

GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey

shell32

ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHCreateDirectoryExW

ole32

CoInitialize

Sections

.text
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cf8c5fa113b99aed71fd281ccd13ed7

Headers

DLL Characteristics

File Characteristics

Imports

wininet

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 324KB - Virtual size: 324KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 324KB - Virtual size: 324KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 7KB - Virtual size: 7KB