c20ffd843f1568e635478286721636af0aae0928d4f0b2b910037efe79d620f4

Sharing

Copy URL Twitter E-mail

General

Target

c20ffd843f1568e635478286721636af0aae0928d4f0b2b910037efe79d620f4
Size

149KB
MD5

559213eb0689549b424bc3aeafce0086
SHA1

abdb38204e2de83876d2a744f7e89a7bf5321650
SHA256

c20ffd843f1568e635478286721636af0aae0928d4f0b2b910037efe79d620f4
SHA512

46c3b1a23f8e6535c610e1d1b3ebd6372f108604f67a580d8b6a67b64793aec96c655615f5912e278f42d51f3413fbc438209e392a709eb68cae2664f8cabbc6
SSDEEP

1536:op0h0G53/G8GtPmAZQtF5hQ35kvDhyUoWkBljk33Ae20k0ug9QXkDMX9uqSSSSZn:QsxPGlmAStcrvjY3AeQ0DMtuZZMZck

Score

N/A

Malware Config

Signatures

Files

c20ffd843f1568e635478286721636af0aae0928d4f0b2b910037efe79d620f4
.exe windows x86

e4ba65c9f6207085306d365fbc55ab9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetFilePointer
WriteConsoleW
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetVersion
RtlUnwind
CreateFileW
GlobalUnlock
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
CloseHandle
GetModuleHandleA
GetExitCodeThread
LoadLibraryA
GetProcAddress
Sleep
GetLastError
LoadLibraryW
GlobalAlloc
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
EncodePointer
RaiseException
lstrcatA
WriteFile
GlobalLock
HeapAlloc
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
GetModuleHandleW
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree

user32

GetDlgItem
DefWindowProcA
ReleaseDC
CreateWindowExA
GetDesktopWindow
EnableMenuItem
EndDialog
SetWindowPos
RegisterDeviceNotificationA
CheckMenuItem
GetWindowLongA
MessageBoxA
GetWindowPlacement
GetMenu
ShowWindow
GetDC
GetIconInfo
CreateIconIndirect
PtInRect
SendMessageA
GetWindowTextLengthA
SetFocus
LoadIconA
GetParent
LoadBitmapA
PostQuitMessage
GetDlgItemInt
EnumDisplayMonitors
SetWindowPlacement
DestroyWindow
IsDlgButtonChecked
MapWindowPoints
SetDlgItemInt
ModifyMenuA
SetDlgItemTextA
GetDlgItemTextA
DestroyIcon

gdi32

CreateHalftonePalette
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

advapi32

UnregisterTraceGuids

ole32

GetHGlobalFromStream
CoInitializeEx
CoInitializeSecurity
CreateStreamOnHGlobal

oleaut32

OleCreatePictureIndirect

ws2_32

send
closesocket
WSACleanup
WSAGetLastError

crypt32

CertCreateCRLContext

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIcon

gdiplus

GdipDeleteGraphics
GdiplusShutdown
GdipDeleteBrush
GdipFree
GdipSetPathGradientCenterColor
GdipCloneBrush
GdipGetImageHeight
GdipSetPathGradientSurroundColorsWithCount
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipAddPathEllipseI
GdipCreatePathGradientFromPath
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipGraphicsClear
GdipGetPathGradientPointCount
GdipAlloc
GdiplusStartup
GdipFillEllipseI
GdipGetImageWidth
GdipCreatePath
GdipCloneImage
GdipCreateHBITMAPFromBitmap
GdipGetImageEncoders
GdipDeletePath
GdipDisposeImage
GdipGetImageEncodersSize

setupapi

SetupDiGetClassImageIndex
SetupDiGetClassImageList

urlmon

CoInternetCombineUrl

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4ba65c9f6207085306d365fbc55ab9c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

ws2_32

crypt32

comctl32

gdiplus

setupapi

urlmon

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 9KB - Virtual size: 17KB

.rsrc Size: 65KB - Virtual size: 65KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 9KB - Virtual size: 17KB

.rsrc
Size: 65KB - Virtual size: 65KB