aba0820b90e0b66d44344f77b5687118e59e409acb3eeef5683bdab83e212b1d

Sharing

Copy URL Twitter E-mail

General

Target

aba0820b90e0b66d44344f77b5687118e59e409acb3eeef5683bdab83e212b1d
Size

1.3MB
MD5

34d5f16cab10db52ff6c27c47e7ddb28
SHA1

01ed478581a63ad25276e89029520e179bd0a679
SHA256

aba0820b90e0b66d44344f77b5687118e59e409acb3eeef5683bdab83e212b1d
SHA512

bd9abf886aaeb7411529d2dfa3780631bbaf482f0d7659d5f34070dcab67a09db06b4d2c6b6c8470e04202b08099eba0bb473345eb9deb7efd4c0addfd2532ed
SSDEEP

24576:vO7AGa/1pqluK5td0HwS4bZETWObmgv6fy:gdSiNq

Score

N/A

Malware Config

Signatures

Files

aba0820b90e0b66d44344f77b5687118e59e409acb3eeef5683bdab83e212b1d
.exe windows x86

23bf8bc3b1a68c9b54c269a382829955

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionA
FoldStringW
GetVolumeInformationA
GetSystemDirectoryW
GetProcessIoCounters
OpenProcess
SetCurrentDirectoryA
GetEnvironmentVariableW
GetShortPathNameA
CreateIoCompletionPort
ResetEvent
FindResourceA
MoveFileWithProgressW
ContinueDebugEvent
MultiByteToWideChar
SwitchToThread
GetNamedPipeInfo
GetCurrentDirectoryW
SetTapeParameters
OpenWaitableTimerA
GetLogicalDrives
ReleaseSemaphore
GetFileType
CreateJobObjectW
FlushInstructionCache
CompareStringW
DeleteTimerQueue
GetAtomNameA
GetStringTypeA
LCMapStringA
CreateFileW
GetCurrentProcess
FindVolumeMountPointClose
GetVolumeInformationW
OpenSemaphoreW
GetThreadLocale
CancelIo
FreeResource
GetDevicePowerState
CreateWaitableTimerA
FreeEnvironmentStringsA
GetConsoleScreenBufferInfo
CreateDirectoryW
SetConsoleCP
GetPrivateProfileStructA
PostQueuedCompletionStatus
VirtualAlloc
SetStdHandle
GetConsoleMode
GetCompressedFileSizeA
FreeEnvironmentStringsW
GetCalendarInfoA
SetTapePosition
WritePrivateProfileStringW
GetVolumePathNameA
OpenEventA
Toolhelp32ReadProcessMemory
CreateMailslotW
GetTapeStatus
GetSystemDefaultLCID
GetFullPathNameW
SetThreadExecutionState
GlobalMemoryStatus
GetConsoleCP
PrepareTape
LocalFileTimeToFileTime
MapUserPhysicalPagesScatter
DeviceIoControl
SetSystemPowerState
SetConsoleMode
SetMailslotInfo
QueryInformationJobObject
GetDateFormatA
GetProcessPriorityBoost
GetDiskFreeSpaceExA
CreateFileMappingW
GetVersion
CancelWaitableTimer
GetBinaryTypeA
GetStringTypeW
GetProcAddress
IsDBCSLeadByteEx
GetDiskFreeSpaceW
GetConsoleAliasExesLengthW
OpenMutexW
SetVolumeMountPointA
GetCPInfo
IsSystemResumeAutomatic
GetThreadTimes
GetProfileStringW
GetProcessWorkingSetSize
Module32First
GetPrivateProfileIntW
EnumCalendarInfoExW
GetSystemWindowsDirectoryA
VerSetConditionMask
AddAtomW
DeleteTimerQueueTimer
FindNextChangeNotification
CompareStringA
FindVolumeClose

user32

GetDlgItemTextA
CreateMenu
wvsprintfW
LoadStringA
ActivateKeyboardLayout
MapWindowPoints
GetThreadDesktop
IsDlgButtonChecked
DrawFocusRect
LoadMenuA
EnumChildWindows
ScreenToClient
GetDCEx
IsChild
CharUpperW
UnregisterClassA
LoadImageW
TranslateAcceleratorW
GetClassLongW
ClientToScreen
IsIconic
GetClassInfoW
ShowWindow
MonitorFromWindow
EnableMenuItem
EndPaint
TrackMouseEvent
LoadStringW
DestroyMenu
GetUserObjectInformationW
IsRectEmpty
GetMessageA
DrawEdge
UnionRect
DestroyWindow
MsgWaitForMultipleObjects
MonitorFromPoint
BeginPaint
SystemParametersInfoW
EmptyClipboard
AttachThreadInput
WinHelpA
GetAltTabInfoA

comctl32

ImageList_DragShowNolock
CreateToolbarEx
ImageList_Replace
ImageList_Draw
ImageList_GetIcon
InitCommonControlsEx
ImageList_GetIconSize
FlatSB_SetScrollProp
ImageList_SetIconSize
DestroyPropertySheetPage
PropertySheetA
ImageList_Create
ImageList_LoadImageW
InitializeFlatSB
FlatSB_GetScrollInfo
CreateStatusWindowW
ImageList_DrawEx
CreatePropertySheetPageA
ImageList_DragLeave
FlatSB_GetScrollPos
ImageList_DragEnter
ImageList_GetDragImage
FlatSB_SetScrollInfo
ImageList_BeginDrag
PropertySheetW
ImageList_SetDragCursorImage
ImageList_GetImageCount
ord17
CreatePropertySheetPageW
ImageList_Write
ImageList_SetImageCount
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Add
FlatSB_SetScrollPos
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Remove
ImageList_EndDrag
ImageList_Copy
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_SetOverlayImage
ImageList_Read
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_SetBkColor
ImageList_DragMove

Sections

.text
Size: 727KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jakf
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lohtw
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pnsg
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sxxl
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23bf8bc3b1a68c9b54c269a382829955

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comctl32

Sections

.text Size: 727KB - Virtual size: 727KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 517KB - Virtual size: 517KB

.jakf Size: 16KB - Virtual size: 16KB

.lohtw Size: 13KB - Virtual size: 13KB

.pnsg Size: 25KB - Virtual size: 25KB

.sxxl Size: 16KB - Virtual size: 16KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 727KB - Virtual size: 727KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 517KB - Virtual size: 517KB

.jakf
Size: 16KB - Virtual size: 16KB

.lohtw
Size: 13KB - Virtual size: 13KB

.pnsg
Size: 25KB - Virtual size: 25KB

.sxxl
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 32KB - Virtual size: 32KB