76612c40ce489b4a124641deeb44ed1a841866253611d066d6f199acdfde44f4

Sharing

Copy URL Twitter E-mail

General

Target

76612c40ce489b4a124641deeb44ed1a841866253611d066d6f199acdfde44f4
Size

58KB
MD5

ff87d7cd9d673762a5ea8a896dc29204
SHA1

6850e95117cde3217d4d48968323d8b5833ab36c
SHA256

76612c40ce489b4a124641deeb44ed1a841866253611d066d6f199acdfde44f4
SHA512

d201244f93f8a960818dca0c02e9843f834afafd5419d5213c439433af157c4f8727470db38278055106bccb1ac2cdd74b87496c16363e3cf9f61cff996f44eb
SSDEEP

1536:ExeO1EokgGqQaJRk6AT+QVARAw9IAGAuPZ3EhGq:KeO6okgnYAxeAHuPZ4d

Score

N/A

Malware Config

Signatures

Files

76612c40ce489b4a124641deeb44ed1a841866253611d066d6f199acdfde44f4
.exe windows x86

a2a8a0a13274f45437e11223a53d783d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
GetExitCodeProcess
TerminateThread
CreateProcessW
Sleep
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
lstrcpyW
GetVersionExA
GetModuleHandleA
GetProcAddress
GetLastError
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetEvent
CreateMutexW
LoadLibraryW
WaitForMultipleObjects
CreateThread
CreateEventW
UnmapViewOfFile
MapViewOfFile
ReleaseMutex
CreateFileMappingW
OpenFileMappingW
TerminateProcess
OpenEventW
SetLastError
GetStartupInfoA
GetCommandLineW
FreeLibrary
LoadLibraryA
HeapFree
CloseHandle
HeapAlloc

user32

LoadStringA
MessageBoxA
MessageBoxW
SetForegroundWindow
GetWindowThreadProcessId
GetClassNameW
SetWindowPos
GetWindowRect
EnumWindows
SendMessageW
ReleaseDC
LoadCursorW
GetSysColorBrush
RegisterClassW
InvalidateRgn
DefWindowProcW
GetClientRect
BeginPaint
EndPaint
UnregisterClassW
GetDesktopWindow
GetWindowLongW
EnableWindow
DialogBoxParamW
IsWindow
GetParent
GetDlgItem
EndDialog
LoadIconW
SendDlgItemMessageW
PostMessageW
SetWindowLongW
SystemParametersInfoW
GetDC
GetSystemMetrics

winmm

waveOutSetVolume
PlaySoundW
PlaySoundA
mixerGetID
waveInGetNumDevs
waveOutGetNumDevs
waveInMessage
waveOutMessage
waveInGetDevCapsW
waveOutGetDevCapsW
waveInGetDevCapsA
waveOutGetDevCapsA
timeGetTime
waveOutGetVolume

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

msvcrt

_wcsnicmp
_controlfp
sprintf
strncpy
wcscpy
wcslen
_wcsicmp
wcstok
_except_handler3
swprintf
swscanf
fclose
fflush
_vsnprintf
fputs
vfprintf
fopen
__CxxFrameHandler
sscanf
wcsncpy
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCloseKey
RegFlushKey

gdi32

MoveToEx
LineTo
Rectangle
GetStockObject
CreateSolidBrush
CreatePen
GetDeviceCaps
CreateFontIndirectW
SelectObject
DeleteObject

dsound

ord1

comctl32

CreatePropertySheetPageW
PropertySheetW
ord17

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2a8a0a13274f45437e11223a53d783d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winmm

ole32

msvcrt

advapi32

gdi32

dsound

comctl32

Sections

.text Size: 50KB - Virtual size: 49KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 50KB - Virtual size: 49KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB