12a91fdf39fc18f08c83c977abd30637068b386c4da283718b70d83da2f7d1e1

Sharing

Copy URL Twitter E-mail

General

Target

12a91fdf39fc18f08c83c977abd30637068b386c4da283718b70d83da2f7d1e1
Size

360KB
MD5

9fd17d5fccdd5b200c3ee92a765bc093
SHA1

bcf86792cf167767ebf905ee7ab0fe28764616b4
SHA256

12a91fdf39fc18f08c83c977abd30637068b386c4da283718b70d83da2f7d1e1
SHA512

8621831437ef3c69e393dbc262195e4527c18c1b396439515dbe03b35cd10a50e24d3bc2a34b0f304674989047aa544f457a98b6ebf1e5b7b8438a022e852bbf
SSDEEP

6144:dukgiaaiu025kZTxPB7SgjgbJHjKwCZPhj7AxMV3OVdNKrfA:dukeDu0254PRdjg1Dr4hjUx7VWr

Score

N/A

Malware Config

Signatures

Files

12a91fdf39fc18f08c83c977abd30637068b386c4da283718b70d83da2f7d1e1
.exe windows x86

387046bdc3d5d2425e21e72635145a57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CloseHandle
CreateFileW
MoveFileW
GlobalSize
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
CreateSemaphoreW
WaitForMultipleObjects
GlobalDeleteAtom
FindResourceW
GlobalGetAtomNameW
MulDiv
GetProfileIntW
GlobalFlags
GetTempPathW
GetPrivateProfileIntW
GetPrivateProfileStringW
CopyFileW
ExpandEnvironmentStringsW
WaitForMultipleObjectsEx
SetThreadPriority
GetCurrentThread
GetCurrentProcess
GetLastError
SetEnvironmentVariableW
GetProcessHeap
LoadResource
LockResource
GetLocalTime
GetTimeFormatW
CreateEventW
GetVersionExW
lstrlenW
SetLastError
LocalFree
CreateDirectoryW
LocalAlloc
GetShortPathNameW
lstrcmpiW
FindVolumeClose
FindNextVolumeW
DeleteFileW
GetDriveTypeW
FindFirstVolumeW
LocalReAlloc
LocalSize
MoveFileExW
SetUnhandledExceptionFilter
GetModuleHandleA
GetSystemTimeAsFileTime
DeleteTimerQueueTimer
ResumeThread
CreateRemoteThread
GetModuleHandleW
OpenProcess
GetFileAttributesW
HeapCreate
HeapAlloc
WaitForSingleObjectEx
QueueUserWorkItem
WaitForSingleObject
ResetEvent
SetThreadExecutionState
SleepEx
CreateProcessW
FindClose
GetWindowsDirectoryW
GetTickCount
SetErrorMode
CreateTimerQueueTimer
SetEvent
GetVersion

user32

CharNextW
SetWindowContextHelpId
WindowFromDC
CopyAcceleratorTableW
RegisterClipboardFormatW
GetMenuStringW
ValidateRect
GetTabbedTextExtentW
IsClipboardFormatAvailable
GetNextDlgGroupItem
SystemParametersInfoW
SetCursorPos
DestroyIcon
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
GetMenuCheckMarkDimensions
MoveWindow
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetWindowTextW
GetClassNameW
GetSysColorBrush
EndPaint
GetNextDlgTabItem
DrawFocusRect
UnionRect
GrayStringW
DrawTextW
LockWindowUpdate
SetParent
GetSystemMenu
AppendMenuW
DeleteMenu
IsRectEmpty
IsZoomed
KillTimer
SetTimer
SetRect
LoadBitmapW
GetWindowDC
InvertRect
FillRect
PtInRect
InflateRect
TranslateMDISysAccel
DrawMenuBar
DefFrameProcW
GetCursorPos
SetThreadDesktop
UnhookWindowsHookEx
ExitWindowsEx
GetAsyncKeyState
CloseWindowStation
CloseDesktop
CreateDesktopW
SetProcessWindowStation
SetWindowsHookExW
GetClientRect
SwitchToThisWindow
AdjustWindowRect
UpdateWindow
IsWindowVisible
SetActiveWindow
ShowScrollBar
GetLastActivePopup
GetSysColor
MapWindowPoints
SetForegroundWindow
GetForegroundWindow
LoadIconW
EnableWindow
GetScrollPos
SetScrollPos
SetScrollRange
GetKeyState
TrackPopupMenu
FrameRect
EnumChildWindows
DrawEdge
ClipCursor
FindWindowW

msvcrt

malloc
wcsstr
memset
exit
memmove
fclose
clearerr
ferror
fread
fwrite
fgetws
fflush
wcspbrk
wcsrchr
wcsspn
wcscspn
iswspace
mktime
gmtime
localtime
wcsftime
calloc
wcstoul
wcstol
strchr
iswdigit
abort

rpcrt4

RpcBindingFree
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcBindingServerFromClient
RpcRevertToSelf
RpcServerListen
RpcServerUseProtseqEpW
RpcServerInqDefaultPrincNameW
RpcServerRegisterAuthInfoW
RpcStringFreeW
UuidFromStringW
RpcEpRegisterW
RpcBindingVectorFree
RpcAsyncAbortCall
RpcBindingCopy
RpcAsyncInitializeHandle
RpcAsyncCancelCall
RpcAsyncCompleteCall
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcMgmtIsServerListening

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

387046bdc3d5d2425e21e72635145a57

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

rpcrt4

Sections

.text Size: 208KB - Virtual size: 204KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 96KB - Virtual size: 105KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 208KB - Virtual size: 204KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 96KB - Virtual size: 105KB

.rsrc
Size: 8KB - Virtual size: 5KB