073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019

Sharing

Copy URL Twitter E-mail

General

Target

073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019
Size

812KB
MD5

7e749dde51c21f5620b98220948cc602
SHA1

45c487fd62c142cdf07b12815b9a49c4519af0d7
SHA256

073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019
SHA512

f2b25a159e984ba9819b294b00ac6d0218768c7b996ef54e5f92c3381536a0560c4d19156a0fba717e4a0f6785b733c5d0ec8c90f5c72b4a902370475aaf1132
SSDEEP

24576:bHUjP2lBln5j8fDxjHgvA2YHmsqmnKEH5V5paFFb:bHt8jeYGdmndH8D

Score

N/A

Malware Config

Signatures

Files

073095a5a1a299d7917389313a1fc4452600ba7653bcb7d4aec74941327f6019
.exe windows x86

14216d0fe75208169eae36d3b91e8c74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetCPInfo
GetCurrentProcess
LCMapStringA
GetStdHandle
SetEnvironmentVariableA
GetTimeZoneInformation
GetLocalTime
GetStartupInfoA
UnhandledExceptionFilter
MultiByteToWideChar
GetLongPathNameA
GetExitCodeThread
EnterCriticalSection
CreateMutexA
SetLastError
GetACP
LoadLibraryExA
OpenMutexA
FindNextChangeNotification
TerminateProcess
GetStringTypeW
GetModuleFileNameA
GetCommandLineA
GetSystemTime
GetModuleHandleA
GetLastError
GetVersion
HeapCreate
VirtualFree
CloseHandle
GetSystemTimeAsFileTime
ReadFile
FreeEnvironmentStringsA
GetCurrentThreadId
GetProcAddress
HeapDestroy
GlobalAddAtomA
TlsGetValue
SetStdHandle
FlushFileBuffers
GetCurrentThread
InterlockedIncrement
InterlockedExchange
SetFilePointer
GetEnvironmentStringsW
OutputDebugStringA
CompareStringW
HeapAlloc
InitializeCriticalSection
FreeEnvironmentStringsW
VirtualAlloc
DeleteCriticalSection
HeapReAlloc
QueryPerformanceCounter
GetTimeFormatW
GetEnvironmentStrings
GetOEMCP
InterlockedDecrement
ExitProcess
GetStringTypeA
GetModuleHandleW
lstrcatW
GetTickCount
FoldStringA
WriteFile
LeaveCriticalSection
LoadLibraryA
CompareStringA
TlsFree
TlsSetValue
HeapFree
TlsAlloc
MoveFileW
SetHandleCount
VirtualQuery
GetFileType
WideCharToMultiByte
RtlUnwind
IsBadWritePtr
GetCurrentProcessId

comdlg32

PrintDlgW
GetOpenFileNameA

comctl32

ImageList_Destroy
ImageList_DragEnter
ImageList_SetFlags
GetEffectiveClientRect
ImageList_DragShowNolock
DrawStatusTextA
ImageList_Draw
InitCommonControlsEx
ImageList_GetFlags
CreatePropertySheetPage
ImageList_SetOverlayImage
CreateStatusWindowA
DrawStatusText
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_SetFilter
ImageList_DragLeave
ImageList_AddMasked
ImageList_Read
ImageList_GetImageCount
ImageList_Copy
InitMUILanguage
ImageList_EndDrag

user32

DdePostAdvise
FrameRect
SetProcessDefaultLayout
GetKeyNameTextA
wsprintfW
ClientToScreen
GetInputDesktop
RegisterClassA
AnimateWindow
InSendMessageEx
EnumPropsW
IsCharLowerW
EndPaint
KillTimer
DragDetect
EndMenu
DrawTextExA
GetClassInfoA
GetTabbedTextExtentA
CloseDesktop
GetClipboardData
CallWindowProcW
EnableMenuItem
EnumDisplayDevicesA
GetDlgCtrlID
EnableWindow
CreateWindowExA
CloseWindowStation
SetRect
GetClassInfoExA
DefWindowProcA
CreateWindowExW
CopyAcceleratorTableA
ChildWindowFromPointEx
SetDlgItemTextW
InvalidateRect
SetWindowLongW
GetKeyNameTextW
TranslateAcceleratorA
GetAsyncKeyState
SetClipboardViewer
NotifyWinEvent
VkKeyScanA
GetClassWord
GetTabbedTextExtentW
DlgDirSelectExW
TileWindows
LoadIconW
IsIconic
CreateMDIWindowA
MapWindowPoints
MessageBoxW
ChildWindowFromPoint
GetDialogBaseUnits
UnionRect
GetKBCodePage
BroadcastSystemMessageA
TranslateAcceleratorW
FreeDDElParam
RegisterClassExA
DialogBoxParamA
ExcludeUpdateRgn
GetGUIThreadInfo
GetMenu
GetCapture
GetDlgItemTextW
ShowWindow
SetWindowsHookA
ClipCursor
PostMessageW
FindWindowExA
OemKeyScan
DdeDisconnectList
DdeCreateStringHandleA
CharToOemBuffW
DestroyWindow

advapi32

CryptGetProvParam
CryptReleaseContext
ReportEventW
CryptContextAddRef
CryptGetDefaultProviderA
RegSetValueA
RegReplaceKeyA
RegSaveKeyA
LogonUserA
CryptSetProviderExW
CryptImportKey
CryptGenRandom
RegOpenKeyA
LookupPrivilegeDisplayNameA
RegCreateKeyExW

gdi32

GetTextExtentPointA
EqualRgn
GetTextCharacterExtra
CopyEnhMetaFileA
EnumFontFamiliesW
EndDoc

shell32

SHGetNewLinkInfo
SHAddToRecentDocs
SHEmptyRecycleBinW

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14216d0fe75208169eae36d3b91e8c74

Headers

File Characteristics

Imports

kernel32

comdlg32

comctl32

user32

advapi32

gdi32

shell32

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 396KB - Virtual size: 392KB

.data Size: 144KB - Virtual size: 140KB

.rsrc Size: 72KB - Virtual size: 69KB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 396KB - Virtual size: 392KB

.data
Size: 144KB - Virtual size: 140KB

.rsrc
Size: 72KB - Virtual size: 69KB