e08659785bfb6b7462158049fa00616c6e65bea1195c1e3bbb088a6eeef0be6f

Sharing

Copy URL Twitter E-mail

General

Target

e08659785bfb6b7462158049fa00616c6e65bea1195c1e3bbb088a6eeef0be6f
Size

519KB
MD5

6cbeed942734ed2d28e987d232db0ee9
SHA1

4dd4401550a788ff6a27901b648632c2cabe9ec3
SHA256

e08659785bfb6b7462158049fa00616c6e65bea1195c1e3bbb088a6eeef0be6f
SHA512

fe151bcd6b15ff4c1325045a8fc2a27d6f313ddadc78a0d65663c95f15c37d4abf130769ccbc3bed152595bf7392e4245e62c905d63366be767071bfefd4d2eb
SSDEEP

12288:Ec1dMYsio6e+x9tkU34HBDHqOGTV9q7wWFnhBP24:EcRx9+UI3U/Gj5

Score

N/A

Malware Config

Signatures

Files

e08659785bfb6b7462158049fa00616c6e65bea1195c1e3bbb088a6eeef0be6f
.exe windows x86

02e63eb4a672ee07921fc4dfeb3c472e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetViewportOrgEx
SetDIBits
GetTextExtentPointW
GetOutlineTextMetricsA
GetICMProfileW
ExcludeClipRect
ResizePalette
SetPixel
EnumObjects
CancelDC
StartDocW

comctl32

ImageList_Destroy
InitCommonControlsEx
ImageList_DragMove
DestroyPropertySheetPage
CreateStatusWindow
CreatePropertySheetPage
ImageList_DrawIndirect
CreateToolbarEx

comdlg32

GetFileTitleA

kernel32

HeapFree
OutputDebugStringW
TerminateProcess
GetUserDefaultLCID
FlushConsoleInputBuffer
FreeEnvironmentStringsW
GetCPInfo
GetDateFormatA
InterlockedExchange
VirtualAlloc
GetCommandLineA
GetOEMCP
GetCurrencyFormatA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
CloseHandle
QueryPerformanceCounter
VirtualProtect
IsValidCodePage
SetEnvironmentVariableA
ExitProcess
HeapSize
VirtualQuery
HeapReAlloc
GetVersionExA
IsBadWritePtr
DeleteCriticalSection
FreeEnvironmentStringsA
GetCurrentProcess
GetStdHandle
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetStringTypeW
GetModuleHandleA
GetACP
GetStringTypeA
GetPrivateProfileStructA
GetStartupInfoW
MapViewOfFile
OpenMutexA
TlsGetValue
VirtualFree
InitializeCriticalSection
FlushFileBuffers
GetSystemInfo
SetStdHandle
FindResourceA
CreateMutexA
GetProfileSectionA
GetLocaleInfoW
GetStartupInfoA
GetCurrentProcessId
TlsAlloc
GetFileType
SetLastError
GetNamedPipeInfo
RtlUnwind
WriteConsoleOutputA
GetCurrentThread
TlsFree
HeapAlloc
WriteConsoleOutputAttribute
ReadFile
GetFullPathNameW
LCMapStringW
EnterCriticalSection
GetModuleFileNameW
CompareStringA
GetEnvironmentStrings
UnhandledExceptionFilter
LoadLibraryA
GetLastError
TlsSetValue
SetConsoleCP
GlobalFree
GetCurrentThreadId
LCMapStringA
SystemTimeToFileTime
CompareStringW
SetHandleCount
WideCharToMultiByte
GetPrivateProfileStructW
GetLocaleInfoA
GetModuleFileNameA
LocalReAlloc
WriteFile
SetFilePointer
GetTickCount
VirtualUnlock
GetCommandLineW
GetTempFileNameW
MultiByteToWideChar
GetTimeFormatA
WriteConsoleA
GetConsoleMode
EnumSystemLocalesA
GetProcAddress
LeaveCriticalSection
IsValidLocale

user32

CopyAcceleratorTableA
SetWindowLongA
CharToOemW
SetShellWindow
IsWindow
SetCaretBlinkTime
DdeCreateStringHandleA
RegisterClassExA
IsCharUpperW
WaitForInputIdle
EnableScrollBar
EnumDisplaySettingsA
InvertRect
MessageBoxA
DestroyWindow
ToUnicode
ShowWindow
SendIMEMessageExA
SwitchToThisWindow
DrawIconEx
RedrawWindow
IsCharLowerW
RegisterClassA
ValidateRect
SetDlgItemTextW
GetWindowTextLengthA
RegisterClipboardFormatA
GetOpenClipboardWindow
CreateWindowExW
DefWindowProcA

advapi32

CryptImportKey
RegRestoreKeyA
CryptContextAddRef
RegCreateKeyA
LookupAccountNameW
RegOpenKeyA
RegSaveKeyW
CreateServiceW
CreateServiceA
LookupPrivilegeNameW
RegNotifyChangeKeyValue
RegCreateKeyW
CryptExportKey
RegFlushKey
LookupSecurityDescriptorPartsW
LookupPrivilegeValueA
RegDeleteKeyW
CryptHashData
CryptEnumProviderTypesW
RegEnumKeyExA
CryptDeriveKey
CryptEncrypt
RegQueryValueW
LookupPrivilegeDisplayNameW
InitiateSystemShutdownW

Sections

.text
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02e63eb4a672ee07921fc4dfeb3c472e

Headers

File Characteristics

Imports

gdi32

comctl32

comdlg32

kernel32

user32

advapi32

Sections

.text Size: 302KB - Virtual size: 301KB

.rdata Size: 81KB - Virtual size: 98KB

.data Size: 114KB - Virtual size: 113KB

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 302KB - Virtual size: 301KB

.rdata
Size: 81KB - Virtual size: 98KB

.data
Size: 114KB - Virtual size: 113KB

.rsrc
Size: 21KB - Virtual size: 20KB