f66656e52e99a705dc8af7737c225a771dbe7c0e9ca2688b7fc59ca6bfc66f99

Sharing

Copy URL Twitter E-mail

General

Target

f66656e52e99a705dc8af7737c225a771dbe7c0e9ca2688b7fc59ca6bfc66f99
Size

117KB
MD5

1e39ff23df7ad19e2dc38536b7aa9694
SHA1

1be7e8f01b2445810685b962faf0121758ab9592
SHA256

f66656e52e99a705dc8af7737c225a771dbe7c0e9ca2688b7fc59ca6bfc66f99
SHA512

0f770716ea0ed2976bde56606db6a13b3dd98f945acfc1184ce8469f157d11a66046dbcaeaa04233633a9f1464e8d27ec35e36c0b0d16185b5fbf52a5f4ff2a3
SSDEEP

3072:WzP2AKNmLogT9Ftx9csvajEYECNklb+NkfjG:WzuRm5tx2sJ7lyNkL

Score

N/A

Malware Config

Signatures

Files

f66656e52e99a705dc8af7737c225a771dbe7c0e9ca2688b7fc59ca6bfc66f99
.exe windows x86

f43fe645a64418f8398bcacacaf88454

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
lstrcmpW
GetModuleHandleW
GlobalLock
LoadResource
CreateProcessW
EnterCriticalSection
GetStartupInfoW
DeleteCriticalSection
GlobalHandle
lstrcmpiW
LeaveCriticalSection
QueryPerformanceCounter
IsProcessorFeaturePresent
VerifyVersionInfoW
GetCurrentProcess
LoadLibraryA
GlobalUnlock
ReadFile
GetCurrentThreadId
RaiseException
lstrlenW
InterlockedExchange
GetStdHandle
VerSetConditionMask
MultiByteToWideChar
InitializeCriticalSection
SetLastError
InterlockedCompareExchange
GetModuleFileNameW
GetSystemTimeAsFileTime
CompareStringW
FreeLibrary
FindResourceW
SizeofResource
TerminateProcess
CloseHandle
HeapFree
LoadLibraryExW
GetCurrentProcessId
GetLastError
FlushInstructionCache
LockResource
WaitForSingleObject
GlobalFree
GlobalAlloc
SetUnhandledExceptionFilter
SetProcessShutdownParameters
PeekNamedPipe
VirtualAlloc
GetProcAddress
GetProcessHeap
OutputDebugStringW
MulDiv
Sleep
VirtualFree
HeapAlloc
GetVersion
VirtualProtect
GetTickCount
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
IsDebuggerPresent
ExitProcess

user32

MessageBoxW
CreateDialogParamW
ClientToScreen
GetPropW
IntersectRect
GetMenuItemCount
DestroyAcceleratorTable
ExitWindowsEx
DestroyIcon
SendDlgItemMessageW
SetCursor
GetActiveWindow
GetCursorPos
SetWindowRgn
IsMenu
FillRect
OffsetRect
GetClassInfoExW
GetDesktopWindow
LoadImageW
DrawFocusRect
SetWindowPos
IsIconic
GetWindowTextLengthW
SetTimer
SetRectEmpty
GetWindowTextW
GetClientRect
SetActiveWindow
PostMessageW
GetWindowRect
GetCapture
CreateDialogIndirectParamW
EnableMenuItem
GetSystemMenu
SendNotifyMessageW
FindWindowExW
GetParent
DialogBoxParamW
MapWindowPoints
SetRect
GetNextDlgTabItem
GetWindowLongW
DefWindowProcW
SetWindowLongW
DestroyWindow
FlashWindowEx
InvalidateRect
GetClipboardData
IsZoomed
GetAncestor
OpenClipboard
InvalidateRgn
SetForegroundWindow
GetDlgItem
MoveWindow
ScreenToClient
CharNextW
GetMenuItemID
AppendMenuW
CloseClipboard
GetUpdateRgn
IsWindow
GetSysColorBrush
TrackMouseEvent
UnregisterClassA
LoadCursorW
GetClassNameW
EnumDisplayMonitors
UpdateWindow
InflateRect
CreateWindowExW
ReleaseDC
IsRectEmpty
CreatePopupMenu
GetMenuState
TranslateMessage
GetSystemMetrics
GetDlgCtrlID
GetDC
IsChild
GetWindowPlacement
RegisterWindowMessageW
InsertMenuItemW
GetFocus
MessageBeep
PostQuitMessage
DrawIconEx
CallWindowProcW
GetWindow
GetMenuItemInfoW
GetMonitorInfoW
DispatchMessageW
PeekMessageW
LoadBitmapW
DrawTextW
LockWindowUpdate
IsWindowEnabled
CreateAcceleratorTableW
MonitorFromWindow
GetForegroundWindow
GetIconInfo
KillTimer
SystemParametersInfoW
CopyRect
EnableWindow
SetWindowTextW
ReleaseCapture
RedrawWindow
TrackPopupMenuEx
GetSysColor
IsWindowVisible
IsDialogMessageW
EqualRect
EndDialog
GetMessagePos
SetFocus
ShowWindow
PtInRect
CharPrevW
SetCapture
CreateMenu
SendMessageW
RegisterClassExW
GetMessageTime
EndPaint
GetKeyState
SetWindowPlacement
DestroyMenu
MonitorFromRect
BeginPaint

gdi32

BitBlt
GetTextExtentPoint32W
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateSolidBrush
SetDCPenColor
GetTextMetricsW
SetTextColor
CreateRectRgn
DeleteObject
GetDeviceCaps
CreateFontIndirectW
SetBkMode
SetBkColor
GetClipRgn
CombineRgn
GetObjectW
SetDCBrushColor
Polyline
CreateCompatibleDC
SelectObject
RectInRegion
SelectClipRgn

comdlg32

GetOpenFileNameW

advapi32

RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW

shell32

ExtractIconExW
ShellExecuteW

oleaut32

SysAllocStringByteLen
VariantInit
SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
GetErrorInfo
SysStringByteLen
VarUI4FromStr
LoadTypeLi
VariantClear
LoadRegTypeLi
OleCreateFontIndirect

comctl32

_TrackMouseEvent

avifil32

AVIStreamWriteData

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f43fe645a64418f8398bcacacaf88454

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

comctl32

avifil32

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 23KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 23KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB