106efd72e024261d6071785c4d82e6960b43e4cf4b35f8ab27d3500e8cda8422

Sharing

Copy URL

Twitter E-mail

General

Target

106efd72e024261d6071785c4d82e6960b43e4cf4b35f8ab27d3500e8cda8422
Size

126KB
MD5

868cc39e6be8de942aeb91a0cd0f0e3a
SHA1

3454f00bc111f77f3e2eaf59a5701eee2812334c
SHA256

106efd72e024261d6071785c4d82e6960b43e4cf4b35f8ab27d3500e8cda8422
SHA512

b02cef21d0ea3fe70b6717771daba518fee3ff9c350999e1be71d856c899aae3e3ce482603e6a1dee2279ff77c857ac8bcfb41b22a584e87850aa22d3139c221
SSDEEP

3072:chQtGHhXy2F9RKMj4ZoPE17JaulUpCS/SGS:1uBy2F9zj4ZB1aul1

Score

N/A

Malware Config

Signatures

Files

106efd72e024261d6071785c4d82e6960b43e4cf4b35f8ab27d3500e8cda8422
.exe windows x86

c5f60d9bb9ef8a6d552dac887c5f0077

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
CloseHandle
GetCurrentProcessId
lstrcpyA
CreateFileW
HeapReAlloc
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
HeapSize
RtlUnwind
LoadLibraryW
IsValidCodePage
GetOEMCP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
LoadLibraryA
GetProcAddress
GetLastError
MultiByteToWideChar
MulDiv
GetVersionExW
CreateEventA
Sleep
WriteFile
GetPrivateProfileStringW
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
GetACP
FlushFileBuffers
ExitProcess
GetModuleHandleW
HeapCreate
IsProcessorFeaturePresent
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
GetTickCount

user32

CallWindowProcA
EnableWindow
DispatchMessageA
LoadAcceleratorsA
DefWindowProcA
GetDlgItem
CheckMenuItem
DialogBoxParamA
ReleaseDC
IsWindow
GetMessageA
GetWindowRect
CreateDialogParamA
IsIconic
FillRect
SetCapture
GetSubMenu
SendMessageA
GetDC
IsDialogMessageA
TranslateMessage
GetWindowTextA
MessageBoxA

gdi32

BitBlt
GetTextExtentPoint32W
DeleteDC
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
SetTextAlign
TextOutW
CreateSolidBrush
MoveToEx

shell32

ExtractIconA

oleaut32

OleLoadPicture
SysAllocStringLen
RegisterActiveObject
SysFreeString

ws2_32

closesocket
WSACleanup
WSAGetLastError
WSAStartup
inet_addr

msimg32

GradientFill

shlwapi

SHCreateStreamOnFileA

comctl32

ord17
ord4

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

Exports

Exports

Type

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5f60d9bb9ef8a6d552dac887c5f0077

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

oleaut32

ws2_32

msimg32

shlwapi

comctl32

wtsapi32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 56KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 38KB - Virtual size: 37KB

.text
Size: 57KB - Virtual size: 56KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 38KB - Virtual size: 37KB