260a72452f1922d575728ff5364f4414dd1d9e2cfae503b2f86cfb589d818eda

Sharing

Copy URL

Twitter E-mail

General

Target

260a72452f1922d575728ff5364f4414dd1d9e2cfae503b2f86cfb589d818eda
Size

950KB
MD5

c5a21af5817889416144181ddbf5989d
SHA1

5c68528cbd1e856cb885a3be1e9b8d5671544bf5
SHA256

260a72452f1922d575728ff5364f4414dd1d9e2cfae503b2f86cfb589d818eda
SHA512

9108ebcdb9d19fd88596cfd25280e336c5413a206ac745de4919129930c62fdbc46fbf0e691e1d40feb64c691a4f2d88c60aba8da6efca643d65d71d68a1273e
SSDEEP

12288:9UNG1iuUeRIkMwjeSFRKeNzHOzXuAoXUHCWKkY:9UNG1x0Lwi0zuz+AoPWK

Score

N/A

Malware Config

Signatures

Files

260a72452f1922d575728ff5364f4414dd1d9e2cfae503b2f86cfb589d818eda
.exe windows x86

63251140a63aafbb1ff12696738bf8d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LocalFree
MultiByteToWideChar
RtlUnwind
GetSystemDirectoryW
SetFilePointer
SetHandleCount
SetStdHandle
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
GetStdHandle
GetStartupInfoW
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcess
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushInstructionCache
FlushFileBuffers
ExitProcess
DeleteCriticalSection
CreateThread
CreateProcessW
CreateEventW
CloseHandle
GetStartupInfoA
lstrlenA
GetCommandLineA
GetLastError
GetModuleHandleA
GetFileAttributesW
GetTickCount
GetVersion
HeapAlloc
VirtualAllocEx
GetProcessHeap
GetCurrentThreadId
GetCommandLineW
GlobalAlloc
LoadLibraryW
lstrlenW
GetDriveTypeA
GetCurrentProcessId
Sleep
GetFileAttributesA
GetDriveTypeW
LoadLibraryA
SetEvent
GetModuleHandleW

user32

TranslateMessage
UnregisterClassW
SetWindowLongW
SetThreadDesktop
SetProcessWindowStation
SetForegroundWindow
SetDlgItemTextW
RegisterClassW
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenWindowStationW
OpenDesktopW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetWindowTextW
GetUserObjectInformationW
GetThreadDesktop
GetProcessWindowStation
GetMessageW
GetDesktopWindow
EnumThreadWindows
DispatchMessageW
DefWindowProcW
CreateWindowExW
CharNextW
LoadIconW
GetSystemMetrics
ShowWindow
LoadBitmapW
GetParent
LoadBitmapA
IsDlgButtonChecked
LoadIconA
DestroyWindow
UpdateWindow
GetDlgItem
SendMessageA
IsWindowVisible
DestroyIcon
GetKeyState
GetMenu
EnableMenuItem
IsWindow
GetDC
SendMessageW
GetSysColor

gdi32

CreateMetaFileW
GetEnhMetaFileW
DeleteEnhMetaFile
CreateCompatibleDC
AddFontResourceW
CreatePatternBrush
GetGraphicsMode
DeleteObject
DeleteMetaFile
GdiFlush
CreateHalftonePalette
CloseFigure
EndDoc
FlattenPath
GdiGetBatchLimit
GetColorSpace
AbortPath
GetEnhMetaFileA
GetBkColor
SelectObject
EndPage
AbortDoc
GetFontLanguageInfo
DeleteDC
CancelDC
AddFontResourceA
GetDCPenColor
SaveDC
EndPath
CloseMetaFile
CreateMetaFileA
SetBkMode
GetDCBrushColor
DeleteColorSpace
BeginPath
CreateSolidBrush
CloseEnhMetaFile
SetTextColor
GetBkMode
SetTextAlign
GetLayout

advapi32

RegQueryValueExA
RegOpenKeyA

shell32

Shell_NotifyIconW

ole32

CoSuspendClassObjects
CoUninitialize
CoResumeClassObjects
CoInitializeSecurity
CoInitializeEx

winmm

timeGetTime

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63251140a63aafbb1ff12696738bf8d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

Sections

.text Size: 894KB - Virtual size: 893KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 23KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 894KB - Virtual size: 893KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 23KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 3KB