731ad7b04d59df9d2f733621a45eabcbb0ddba6fb891ff5850f3bb5d1d70d354

Sharing

Copy URL Twitter E-mail

General

Target

731ad7b04d59df9d2f733621a45eabcbb0ddba6fb891ff5850f3bb5d1d70d354
Size

696KB
MD5

9d65349eb0cd5cbd0e7625c9b4b5cb49
SHA1

cddd45ac750ced2f4fc69613c44b89f92cc7ddfd
SHA256

731ad7b04d59df9d2f733621a45eabcbb0ddba6fb891ff5850f3bb5d1d70d354
SHA512

08becbd52a18be0385d949c991569f276d737c506dd0441decaeb566c080b40b7ac399a9d84639bec809cef5f2374ad8c026bed90f70fa1a8c303f293e56bbff
SSDEEP

12288:7auAKXGfcj1v0XE9FxXRB+oUJlOL/yixSeA5gUKHEZsyHk:HYfcjSXcBeJIL/O5Zk0syH

Score

N/A

Malware Config

Signatures

Files

731ad7b04d59df9d2f733621a45eabcbb0ddba6fb891ff5850f3bb5d1d70d354
.exe windows x86

4905391eae36e0d8414f1d3adce86a17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyW
RevertToSelf
CryptEnumProviderTypesA
RegCreateKeyExA
InitiateSystemShutdownA
CryptHashSessionKey
RegOpenKeyW
LookupAccountNameA

user32

RegisterClassA
GetSystemMetrics
SetKeyboardState
GrayStringA
DispatchMessageA
DdeCreateStringHandleA
GetTopWindow
SetClipboardViewer
HideCaret
TileWindows
GetNextDlgGroupItem
SetWindowWord
DdeFreeStringHandle
VkKeyScanW
DlgDirSelectComboBoxExW
IsWindow
GetSubMenu
GetKeyboardLayout
GetListBoxInfo
DrawEdge
GetClassInfoW
VkKeyScanExW
GetMenuState
CharUpperA
EnumClipboardFormats
OemToCharA
RegisterClassExA
WaitForInputIdle
SwapMouseButton
GetParent
IsCharUpperW
TranslateAcceleratorA
DefDlgProcA
EnumThreadWindows
IsDialogMessageW
DefFrameProcW
GetClipboardSequenceNumber
GetClassInfoA
GetMenuItemInfoW
SetCursorPos
ReuseDDElParam
CheckMenuRadioItem
DdeGetLastError
SendMessageW
EnumDisplaySettingsA
GetKeyboardLayoutList
GetWindowRgn

kernel32

CreateWaitableTimerW
GetLastError
EnumSystemLocalesA
DeleteCriticalSection
GetTimeZoneInformation
TlsGetValue
CreateMutexA
CompareStringW
GetSystemTime
WriteConsoleOutputW
VirtualFree
SetLastError
GetEnvironmentStrings
CloseHandle
GetShortPathNameW
GetModuleFileNameA
TlsAlloc
GetStartupInfoA
SystemTimeToTzSpecificLocalTime
FindFirstFileW
CreateToolhelp32Snapshot
UnhandledExceptionFilter
FlushFileBuffers
ExitThread
SetFileAttributesA
VirtualUnlock
ExitProcess
GetCommandLineW
GetStartupInfoW
SetHandleCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GlobalAlloc
SetThreadPriority
HeapFree
VirtualQueryEx
SetLocalTime
EnterCriticalSection
GetStringTypeExW
HeapAlloc
HeapReAlloc
HeapDestroy
RtlUnwind
GetEnvironmentStringsA
FreeEnvironmentStringsW
GetTimeFormatA
GetEnvironmentStringsW
TlsFree
GetTickCount
OpenSemaphoreA
QueryPerformanceCounter
GlobalAddAtomW
SetStdHandle
InitializeCriticalSection
EnumSystemCodePagesA
lstrcatA
CompareFileTime
LeaveCriticalSection
CommConfigDialogA
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetStdHandle
GetLongPathNameW
GlobalHandle
GetFileType
ReadFile
FreeEnvironmentStringsA
GetCalendarInfoA
EnumTimeFormatsA
lstrcpyn
VirtualAlloc
GetStringTypeA
SetEnvironmentVariableA
HeapCreate
GetCurrentThreadId
IsBadWritePtr
TerminateProcess
SetCriticalSectionSpinCount
SetFilePointer
GetOEMCP
LCMapStringW
GetStringTypeW
ConvertDefaultLocale
CompareStringA
GetVersion
InterlockedDecrement
GetCPInfo
OpenMutexA
GlobalCompact
MultiByteToWideChar
WriteFile
InterlockedExchange
LoadLibraryA
WideCharToMultiByte
WaitForMultipleObjects
VirtualQuery
SetFileAttributesW
GetModuleFileNameW
OutputDebugStringW
GetCurrentProcess
TlsSetValue
SetFileTime
GetProcAddress
lstrcmpi
GetCurrentThread
LCMapStringA
EnumResourceNamesW
InterlockedIncrement
lstrcatW
GetConsoleScreenBufferInfo

shell32

FindExecutableW
SHBrowseForFolder
SHFreeNameMappings
CheckEscapesW
SHLoadInProc

comctl32

ImageList_LoadImage
InitCommonControlsEx
ImageList_GetFlags
ImageList_SetFlags

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 452KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4905391eae36e0d8414f1d3adce86a17

Headers

File Characteristics

Imports

advapi32

user32

kernel32

shell32

comctl32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 452KB - Virtual size: 448KB

.data Size: 124KB - Virtual size: 143KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 452KB - Virtual size: 448KB

.data
Size: 124KB - Virtual size: 143KB

.rsrc
Size: 40KB - Virtual size: 36KB