ab118a9193bd48b150ea5943f85f39a963d1765121a0a43cd7883a48240fcde7

Sharing

Copy URL Twitter E-mail

General

Target

ab118a9193bd48b150ea5943f85f39a963d1765121a0a43cd7883a48240fcde7
Size

714KB
MD5

2a1551850a50cdb137353247c730d20d
SHA1

8568db4235537e7431490fb4ef83c7b780d1abe4
SHA256

ab118a9193bd48b150ea5943f85f39a963d1765121a0a43cd7883a48240fcde7
SHA512

86d615e590d601de760f48b49e3a4c7f0df9752a70c7f95bc59f46b5cdbd6c120c84091154cdf24521ca71624f36326cbf9fd2c9f2f6cd76fdf5e668e9070126
SSDEEP

12288:wWaVQPWPvGmy2jK5sozfO8cf7jP1i53nvMdiDmKsvUZNa1tiGmY7vnYqORpme/k1:Fa2uemSxQvP1i5fMYDzVna1t7v4Ce/CV

Score

N/A

Malware Config

Signatures

Files

ab118a9193bd48b150ea5943f85f39a963d1765121a0a43cd7883a48240fcde7
.exe windows x86

75259f3ec484c727c3309fda719b46b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
DeleteObject
GetStockObject
CreateCompatibleDC
SelectObject
CreateSolidBrush
SetBkMode

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueW
RegDeleteValueA

user32

SetWindowPos
IsWindow
GetDC
ReleaseDC
GetKeyState
DestroyWindow
GetParent
UpdateWindow
DefWindowProcA
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
DispatchMessageA
MapWindowPoints
BeginPaint
GetSystemMetrics
GetWindowRect
SetWindowTextA
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
SetForegroundWindow
FillRect
MessageBoxA
GetFocus
SystemParametersInfoA
IsWindowVisible
InvalidateRect
wsprintfA
GetClientRect
SetCursor
CreateWindowExA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetStdHandle
GetConsoleOutputCP
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
FindNextFileA
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
lstrcatA
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
MultiByteToWideChar
GetTempPathA
WideCharToMultiByte
LoadLibraryW
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetEvent
LocalFree
InitializeCriticalSection
LoadResource
GlobalLock
FindClose
TlsGetValue
FormatMessageA
SetLastError
InterlockedDecrement
GetModuleFileNameW
IsDebuggerPresent
FlushFileBuffers
GetModuleFileNameA
GetTickCount
GetCurrentThread
GetCurrentProcessId
GetLastError
GetCommandLineA
GetVersion
GetCurrentThreadId
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
GetOEMCP
VirtualAlloc
Sleep
VirtualFree
UnmapViewOfFile
CreateProcessA
SizeofResource
SetStdHandle
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
GetEnvironmentStrings
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateFileW
WaitForMultipleObjects
FindFirstFileW
FindFirstFileA
CompareStringW
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
GetFileSize
GetStartupInfoA
GetModuleHandleW
GetVersionExA
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GlobalAlloc
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
LoadLibraryA

msvcrt

exit
_cexit
_controlfp
_exit

Sections

.text
Size: 669KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75259f3ec484c727c3309fda719b46b2

Headers

File Characteristics

Imports

gdi32

advapi32

user32

version

kernel32

msvcrt

Sections

.text Size: 669KB - Virtual size: 992KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 25KB - Virtual size: 25KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 669KB - Virtual size: 992KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 25KB - Virtual size: 25KB

.rsrc
Size: 11KB - Virtual size: 10KB