45d675b70abeb256e45b71ceef8830454e01197acd8ee0f381c3a556f8ec61d6

Sharing

Copy URL Twitter E-mail

General

Target

45d675b70abeb256e45b71ceef8830454e01197acd8ee0f381c3a556f8ec61d6
Size

556KB
MD5

7d534f96331d879bc1e0a5c558e84be8
SHA1

6ad9c8a2e9439adf8b51bf2b7d7cb9502179c11d
SHA256

45d675b70abeb256e45b71ceef8830454e01197acd8ee0f381c3a556f8ec61d6
SHA512

91fc155a781438b5714d0d3a785e5178b8353f0710bccc3e7934c844aedaafdb8d23d6a29de09c780394465b804265a1b2c4d890d7cded51c6254577b8159160
SSDEEP

6144:8Zo4GVP/BGW+fWkQ7J5U/QriPisS701o8Xsfw+ZUXUqIvg4pcVdYGP3/nCwHXv9a:TDHBXbPUIrUisVyf9oWmVdfPvB3v7c

Score

N/A

Malware Config

Signatures

Files

45d675b70abeb256e45b71ceef8830454e01197acd8ee0f381c3a556f8ec61d6
.exe windows x86

a59abd1ba54d9c3d127612ea552a1849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCommandLineA
MultiByteToWideChar
GetModuleHandleA
CreateMutexA
GetLastError
GetVersionExA
LoadLibraryA
GetFileType
GetDateFormatA
GetCurrentThread
GetLocaleInfoA
SetStdHandle
IsValidCodePage
GetStartupInfoA
GetCPInfo
HeapAlloc
GetProcAddress
LCMapStringA
GetCurrentThreadId
HeapCreate
GetTickCount
WriteFile
VirtualQuery
FreeEnvironmentStringsA
CompareStringW
LeaveCriticalSection
QueryPerformanceCounter
GetOEMCP
RtlUnwind
WriteProfileStringA
GetSystemInfo
GetSystemDefaultLCID
WideCharToMultiByte
HeapReAlloc
CloseHandle
VirtualProtect
OpenMutexA
GetSystemTimeAsFileTime
TlsGetValue
GetLocaleInfoW
SetFilePointer
GetCurrentProcess
FillConsoleOutputAttribute
VirtualAlloc
EnterCriticalSection
GetACP
TlsSetValue
ExitProcess
FlushFileBuffers
FindFirstFileExW
GetTimeFormatA
TlsFree
SetConsoleTextAttribute
HeapSize
InterlockedExchange
CompareStringA
GetStringTypeA
TlsAlloc
GetEnvironmentStringsW
TerminateProcess
HeapFree
GetStdHandle
IsValidLocale
GetTimeZoneInformation
SetEnvironmentVariableA
SetHandleCount
HeapDestroy
LCMapStringW
InitializeCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsW
DeleteCriticalSection
GetEnvironmentStrings
ReadFile
IsBadWritePtr
VirtualFree
GetModuleFileNameA
EnumSystemLocalesA
GetUserDefaultLCID
SetLastError
GetStringTypeW

shell32

SHEmptyRecycleBinA
SHGetPathFromIDListA
SHAppBarMessage
FindExecutableA
SHGetDiskFreeSpaceA

gdi32

CreateDCA
GetDeviceCaps
EqualRgn
GetCharABCWidthsW
Ellipse
DeleteDC
SelectObject
StartDocW
GetObjectA
AddFontResourceA
FrameRgn
CreatePolyPolygonRgn
SetBrushOrgEx
SetDIBits
GetPaletteEntries
GetEnhMetaFileA
DeleteObject

user32

SetWindowTextW
GetSubMenu
CreateWindowExA
SetKeyboardState
OemKeyScan
MsgWaitForMultipleObjects
GetMonitorInfoA
GetClipboardData
DestroyWindow
GetGUIThreadInfo
DrawTextExW
SetCursorPos
ShowWindow
CreateDesktopW
SetDlgItemInt
GetCaretBlinkTime
IsChild
EnumDesktopsA
GetKeyboardLayoutList
RegisterClipboardFormatA
EnumDesktopsW
DrawMenuBar
GetTabbedTextExtentA
ScreenToClient
DdeFreeStringHandle
LoadCursorA
RegisterClassA
GetScrollInfo
ReleaseCapture
GetNextDlgTabItem
DdeCreateDataHandle
wsprintfW
GetSystemMenu
DefWindowProcW
IsCharLowerW
MonitorFromPoint
LookupIconIdFromDirectoryEx
EnumDisplayDevicesA
wsprintfA
RegisterClassExA
SetWindowLongW
CopyImage
MessageBoxW
SetShellWindow
IsCharUpperA
GetMenuState
CallNextHookEx
InSendMessage
SetWindowLongA
DdeClientTransaction
MessageBoxExA
DefFrameProcW
RegisterClassExW

advapi32

LookupSecurityDescriptorPartsW
RegEnumValueA
CryptEnumProvidersA
RegOpenKeyExA
RegEnumKeyW
CryptSignHashW
CryptDuplicateKey
RegQueryInfoKeyA
RegNotifyChangeKeyValue
LookupPrivilegeNameW
CryptEncrypt
CryptDecrypt
CryptSetProviderExW
InitiateSystemShutdownA
RegEnumValueW
RegQueryMultipleValuesW

comctl32

ImageList_GetImageRect
DrawStatusText
ImageList_SetDragCursorImage
ImageList_Add
DrawStatusTextA
ImageList_SetOverlayImage
ImageList_DrawEx
ImageList_GetFlags
InitCommonControlsEx

comdlg32

PageSetupDlgW
FindTextW
FindTextA
ChooseFontW

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a59abd1ba54d9c3d127612ea552a1849

Headers

File Characteristics

Imports

kernel32

shell32

gdi32

user32

advapi32

comctl32

comdlg32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 256KB - Virtual size: 254KB

.data Size: 104KB - Virtual size: 109KB

.rsrc Size: 92KB - Virtual size: 90KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 256KB - Virtual size: 254KB

.data
Size: 104KB - Virtual size: 109KB

.rsrc
Size: 92KB - Virtual size: 90KB