9ef5b620cadd9c511b8a8911a068bc7078ee79dd49bec83592e530ca1b3e9dd2

Sharing

Copy URL Twitter E-mail

General

Target

9ef5b620cadd9c511b8a8911a068bc7078ee79dd49bec83592e530ca1b3e9dd2
Size

214KB
MD5

016e69105d30bcd7ed92b7c9c245b3b5
SHA1

9ef04186295a211bcf2fb645a083b8c956b65979
SHA256

9ef5b620cadd9c511b8a8911a068bc7078ee79dd49bec83592e530ca1b3e9dd2
SHA512

4c35a088409b25541795ebd8f7cede3d8b198bcb80f4de23234fc524e6425b03a833061ad05502645ecdbfa3e74386bf0a038ebfd244229f1cde8398c5e9f923
SSDEEP

3072:umFtDZS6xx2kulnaHJ8QIXwrZdVnn4r5jl50nvvhy6Ke2q:zjDZ7I28Qdr9Y5JGn3hyjlq

Score

N/A

Malware Config

Signatures

Files

9ef5b620cadd9c511b8a8911a068bc7078ee79dd49bec83592e530ca1b3e9dd2
.exe windows x86

64ef15448025e5fe8413618e9b1e3218

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
SetTextColor
DeleteDC
CreateDIBSection
Rectangle
RectInRegion
SetBkMode
DeleteObject
SetMapMode
ExtTextOutA
EndPage
GetTextMetricsA
GetStockObject
SelectClipRgn
Polyline
SetTextAlign
GetDeviceCaps
CreateRectRgnIndirect
RestoreDC
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
SaveDC
StartDocA
EndDoc
GetObjectA
BitBlt
SetROP2
StartPage
GetBkMode
SetBkColor
GetTextExtentPoint32A
GetBkColor
MoveToEx

kernel32

GetStdHandle
UnhandledExceptionFilter
GetCommandLineW
GetModuleFileNameA
GetEnvironmentStringsW
GetLastError
TlsFree
InterlockedDecrement
FreeLibrary
Module32First
VirtualAlloc
GetACP
ReadProcessMemory
DuplicateHandle
GetConsoleMode
VirtualFree
MultiByteToWideChar
SetEnvironmentVariableA
MapViewOfFile
TlsAlloc
GetComputerNameW
DeleteCriticalSection
RtlUnwind
GetCurrentThreadId
TerminateThread
GetFileAttributesA
VirtualQueryEx
GetThreadContext
Module32Next
ExitProcess
LoadLibraryW
CreateProcessA
GetCurrentProcess
GetVersionExA
ExpandEnvironmentStringsA
lstrcmpA
lstrlenA
TlsGetValue
HeapAlloc
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
LocalAlloc
GetStartupInfoA
SearchPathA
TerminateProcess
QueryPerformanceFrequency
ResumeThread
SizeofResource
WaitForSingleObject
ReadFile
HeapSize
GetStringTypeW
LeaveCriticalSection
LockResource
ResetEvent
LoadLibraryA
FindFirstFileA
IsValidCodePage
GetLocaleInfoA
GetModuleHandleA
GetTickCount
SetThreadAffinityMask
CreateThread
LCMapStringW
GetConsoleOutputCP
GetEnvironmentStrings
SetLastError
GetNumberFormatA
PulseEvent
lstrcatA
LCMapStringA
GetSystemInfo
GetEnvironmentVariableA
GlobalUnlock

user32

DrawIconEx
SetClipboardData
DialogBoxParamA
SetForegroundWindow
CreateIconIndirect
GetMenuItemID
SetWindowLongA
IntersectRect
DialogBoxIndirectParamA
GetPropA
GetSystemMetrics
WindowFromPoint
SetScrollInfo
InsertMenuA
SetPropA
SystemParametersInfoA
SendMessageTimeoutA
InvalidateRgn
BeginDeferWindowPos
CallWindowProcA
RedrawWindow
RegisterClassExA
wsprintfA
IsDialogMessageA
GetMenuItemCount
IsDlgButtonChecked
CheckMenuItem
CopyRect
RegisterWindowMessageA
CloseClipboard
GetMessageA
FillRect
SetFocus
LoadStringA
CheckRadioButton
SetMenuItemInfoA
SetCapture
CheckDlgButton
DrawEdge
RemoveMenu
DispatchMessageA
MapWindowPoints
FindWindowA
DestroyIcon
GetDlgItemTextA
RegisterClassA
TranslateMessage
FindWindowExA
MoveWindow
SetUserObjectSecurity
GetDoubleClickTime
ShowWindow
IsIconic
GetFocus
GetSysColor
EndPaint
GetWindowLongA
OffsetRect
GetWindowThreadProcessId
PeekMessageA
CreateWindowExA
EndDialog
DestroyWindow
GetWindowDC
GetClassNameA
EndDeferWindowPos
GetKeyState
SetDlgItemTextA

msvcrt

_wsplitpath
isspace
fseek
_snwscanf
_wtof
fprintf
_wcslwr
_close
ungetc
_get_sbh_threshold
_utime64
__setusermatherr
_wstati64
fmod
_mbsset
_acmdln
_strncoll
labs
_adj_fpatan
__getmainargs
_snscanf
_dup
ldiv
_stricoll
is_wctype
_XcptFilter
ldexp
_cprintf
_resetstkoflw
_fsopen
strspn
_pwctype
wprintf
_wutime
_heapwalk
_waccess
fwrite
_getw
_cscanf
_commode
fputs
_flsbuf
wcspbrk
strcspn
_wperror
_strlwr
__p__commode
_adjust_fdiv
_vscprintf
_wtoi
wscanf
_ismbbpunct
_strtoui64
ceil
_exit
_findclose
strtoul
_wfopen
_finite
_wutime64
_mbsncat
_wpopen
memcpy
_except_handler3
_heapset
_amsg_exit
_spawnve
getchar
wcsncpy
_setjmp3
_wcsupr
_cwait
tanh
__p__fmode
_adj_fdiv_r
_mbsbtype
_controlfp
_ismbbkprint
_mbsncpy
_findfirst
_wspawnlp
raise
_ismbbtrail
_wcstoi64
strcat
iswupper
_mbsnicoll
_getdcwd
getc
fscanf
gets
iswalpha
_initterm
exit
_ftime64
_telli64
_getmaxstdio
_ultow
tmpnam
srand
qsort
strpbrk
isalpha
_gcvt
towupper
__set_app_type
_adj_fprem1
_memicmp
_mbsdup
_fstati64

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64ef15448025e5fe8413618e9b1e3218

Headers

File Characteristics

Imports

gdi32

kernel32

user32

msvcrt

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 185KB - Virtual size: 184KB

.data Size: 512B - Virtual size: 127B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 185KB - Virtual size: 184KB

.data
Size: 512B - Virtual size: 127B

.rsrc
Size: 512B - Virtual size: 4B