0e0811097b6e06d96416c21c49590aa249c7088f2dfe5ecd777abc3c693bf62b

Sharing

Copy URL Twitter E-mail

General

Target

0e0811097b6e06d96416c21c49590aa249c7088f2dfe5ecd777abc3c693bf62b
Size

288KB
MD5

b4a5764135c473688714026bdd92616b
SHA1

a8b16b705fd862ddef63582fb05881173423211d
SHA256

0e0811097b6e06d96416c21c49590aa249c7088f2dfe5ecd777abc3c693bf62b
SHA512

fd333034c31e831e0ded18aa6c7aa78bb5cfef5d55fc0b9940eea5f96566aa6602117927e1a72cba4d9ae319451782e46dd6a5a09deac788213620b622bf9fff
SSDEEP

6144:oZBKVnZcp9Fc2MdUQkskS1n2jLVfTIhdLKvaOcAsx:uBKVnZcp9FcTPn2jLlkPKvaL

Score

N/A

Malware Config

Signatures

Files

0e0811097b6e06d96416c21c49590aa249c7088f2dfe5ecd777abc3c693bf62b
.exe windows x86

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
timeGetTime

shlwapi

SHDeleteKeyA

setupapi

SetupIterateCabinetA

kernel32

GetLastError
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
GetVolumeInformationA
GetSystemDirectoryA
CloseHandle
OpenSemaphoreA
OutputDebugStringA
SetFileAttributesA
CreateEventA
WaitForSingleObject
SetEvent
CreateThread
GetCurrentThreadId
GetExitCodeProcess
TerminateProcess
CreateProcessA
GetModuleHandleA
CreateFileA
FindClose
GetDateFormatA
SystemTimeToTzSpecificLocalTime
IsBadWritePtr
GetSystemTime
Sleep
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
EnumSystemLocalesA
GetCurrentDirectoryA
EnumResourceNamesA
InitializeCriticalSection
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
VirtualQuery
GetOEMCP
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
GetTimeZoneInformation
TlsFree
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
LCMapStringA
IsBadReadPtr
HeapAlloc
ExitProcess
HeapFree
GetCommandLineA
DeleteFileA
GetFileAttributesA
FindFirstFileA
SetFilePointer
ReadFile
WriteFile
lstrlenA
GetModuleFileNameA
SetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
IsValidLocale
IsValidCodePage
FileTimeToSystemTime
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
LoadLibraryA
DeleteCriticalSection
FileTimeToLocalFileTime
GetDriveTypeA
GetFullPathNameA
GetStartupInfoA
RtlUnwind
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
LocalFree
MultiByteToWideChar

user32

RegisterClassExA
GetWindowLongA
DefWindowProcA
CreateWindowExA
ReleaseCapture
ClientToScreen
BeginPaint
EndPaint
InvalidateRect
SetCursor
PtInRect
LoadIconA
SystemParametersInfoA
UpdateWindow
ShowWindow
SetFocus
SendMessageA
SetWindowRgn
EnumChildWindows
GetClassNameA
GetWindowRect
SetWindowPos
LoadBitmapA
GetClientRect
KillTimer
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
CopyIcon
SetSystemCursor
PostThreadMessageA
MessageBoxA
IsWindow
PostQuitMessage
PostMessageA
SetWindowLongA
LoadStringA
GetParent
FindWindowA
SetRect
MoveWindow
SetCapture

gdi32

ExtCreateRegion
CreateCompatibleDC
DeleteDC
StretchBlt
SelectObject
BitBlt
CreateRectRgn
OffsetRgn
CombineRgn
GetObjectA
DeleteObject
CreateDIBSection

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52e9b8848be2d870e7309a28db2ac9db

Headers

File Characteristics

Imports

winmm

shlwapi

setupapi

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 32KB - Virtual size: 52KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 32KB - Virtual size: 52KB