03b9e671257c69ab482f55e06ef2f930faf58f7a0965017a7d7054757666642e

Sharing

Copy URL Twitter E-mail

General

Target

03b9e671257c69ab482f55e06ef2f930faf58f7a0965017a7d7054757666642e
Size

883KB
MD5

996c519ceccdbc851976edcfb3565189
SHA1

2f2c29bdbc9d91b06211baab8c487b2cac73f203
SHA256

03b9e671257c69ab482f55e06ef2f930faf58f7a0965017a7d7054757666642e
SHA512

63d335d254f5a640fa53be2c9ead30daf477e4b6a8c747597d367ab954d9c5cba4dee02ba249ba85766ea706d9f027ac086bbe596de15e31a4894b617aa87fd7
SSDEEP

6144:jTd4JCENzsXwY39F01I9Fxe36qM7DB7GkiiEKIEAVBnq2faHBeqYsSOwYz4xyEEa:WvNUh40fk6DnB6kyTo2CHBF2xh

Score

N/A

Malware Config

Signatures

Files

03b9e671257c69ab482f55e06ef2f930faf58f7a0965017a7d7054757666642e
.exe windows x86

cb001a2caa1be5b38115909b7678e57d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetProcAddress
lstrlenA
WriteFile
WinExec
WaitForMultipleObjects
SystemTimeToFileTime
Sleep
SetFilePointer
SetErrorMode
SetEndOfFile
ReadFile
QueryPerformanceCounter
LeaveCriticalSection
IsDBCSLeadByte
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetVersionExA
GetTimeZoneInformation
GetModuleHandleW
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetFileSize
GetCommandLineA
GetCPInfo
GetACP
ExitThread
ExitProcess
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessA
CreateFileA
CopyFileA
CloseHandle
VirtualAllocEx

user32

TranslateAcceleratorA
TranslateMessage
UpdateWindow
WindowFromPoint
TrackPopupMenu
ShowWindow
SetWindowPos
SetWindowLongA
SetTimer
SetMenu
SetFocus
SetDlgItemTextA
SetCursor
SetClipboardData
SetCapture
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassA
PostQuitMessage
PostMessageA
OpenClipboard
MessageBoxA
MapVirtualKeyA
LoadStringA
LoadMenuA
LoadIconA
LoadCursorA
LoadAcceleratorsA
KillTimer
IsWindow
InvalidateRect
GetWindowTextLengthA
GetWindowRect
GetWindowLongA
GetWindow
GetSubMenu
GetMessageA
GetMenu
GetKeyState
GetFocus
GetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetCapture
FillRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DeleteMenu
DefWindowProcA
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeDisconnect
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
CreateWindowExA
CloseClipboard
ClientToScreen
CheckMenuItem
BeginPaint
LoadIconW
MoveWindow

gdi32

DeleteDC
DeleteObject
EndDoc
EndPage
EndPath
EnumFontFamiliesA
ExtCreatePen
ExtTextOutA
FillPath
GdiFlush
GetBkColor
GetBkMode
GetClipBox
GetClipRgn
GetDeviceCaps
GetObjectA
DPtoLP
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
LPtoDP
LineTo
MoveToEx
PolyBezierTo
RealizePalette
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
CreateSolidBrush
CreateRectRgn
CreatePen
CreatePalette
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
BeginPath
GetSystemPaletteEntries
CreateMetaFileA
StrokePath
StretchDIBits
StartPage
StartDocA
SetTextColor
SetTextAlign
SetPolyFillMode
SetDIBitsToDevice
SetBkMode
SetBkColor

comdlg32

PrintDlgA
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCreateKeyA
RegSetValueExA
RegSetValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueA

shell32

DragAcceptFiles
DragQueryFileA

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

62
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

61
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

60
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

59
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

58
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

57
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

56
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

55
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

54
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

53
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

52
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

51
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb001a2caa1be5b38115909b7678e57d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 636KB - Virtual size: 636KB

62 Size: 12KB - Virtual size: 11KB

61 Size: 12KB - Virtual size: 11KB

60 Size: 12KB - Virtual size: 11KB

59 Size: 12KB - Virtual size: 11KB

58 Size: 12KB - Virtual size: 11KB

57 Size: 12KB - Virtual size: 11KB

56 Size: 12KB - Virtual size: 11KB

55 Size: 12KB - Virtual size: 11KB

54 Size: 12KB - Virtual size: 11KB

53 Size: 12KB - Virtual size: 11KB

52 Size: 12KB - Virtual size: 11KB

51 Size: 12KB - Virtual size: 11KB

5 Size: 12KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 6KB - Virtual size: 6KB

.rsrc Size: 77KB - Virtual size: 76KB

.text
Size: 636KB - Virtual size: 636KB

62
Size: 12KB - Virtual size: 11KB

61
Size: 12KB - Virtual size: 11KB

60
Size: 12KB - Virtual size: 11KB

59
Size: 12KB - Virtual size: 11KB

58
Size: 12KB - Virtual size: 11KB

57
Size: 12KB - Virtual size: 11KB

56
Size: 12KB - Virtual size: 11KB

55
Size: 12KB - Virtual size: 11KB

54
Size: 12KB - Virtual size: 11KB

53
Size: 12KB - Virtual size: 11KB

52
Size: 12KB - Virtual size: 11KB

51
Size: 12KB - Virtual size: 11KB

5
Size: 12KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 77KB - Virtual size: 76KB