3ea15acc3031bbf494b2d72ac85f1e85a45a8420eafb731a9dfa4056e27245ad

Sharing

Copy URL Twitter E-mail

General

Target

3ea15acc3031bbf494b2d72ac85f1e85a45a8420eafb731a9dfa4056e27245ad
Size

835KB
MD5

6bb4e0a3864aa5646d75464b06d3e3a6
SHA1

f35c798c0196847901c762361fc594642b8ccd4c
SHA256

3ea15acc3031bbf494b2d72ac85f1e85a45a8420eafb731a9dfa4056e27245ad
SHA512

95a46a45d0e2f9874cbf8f1bb43aa5642c2c985dc812b3147c46546dd928aac49b21700326314ab1cba706670feb4f1f914b4d1272f28fdb65099491eef5ed37
SSDEEP

12288:UTI/LDbHuvV7T48I0UGiyqMyPesF9jvVQ+iV5XuBA9rQpTJzyqhN4n6wDJmRxH:0I7C3oGinT5zfG+69rQ5FJ6n6RRxH

Score

N/A

Malware Config

Signatures

Files

3ea15acc3031bbf494b2d72ac85f1e85a45a8420eafb731a9dfa4056e27245ad
.exe windows x86

b1ae707702ee02d771e18118a56890fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadImageA
LoadKeyboardLayoutA
LoadStringA
LockWindowUpdate
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SendNotifyMessageA
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowsHookExA
SetWindowsHookExW
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
ValidateRect
WaitMessage
WinHelpA
WindowFromPoint
wsprintfA
wvsprintfA
GetSysColor

comdlg32

ChooseFontA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ChooseColorA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegCloseKey

kernel32

GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
InterlockedDecrement
InterlockedIncrement
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
HeapCreate
HeapReAlloc
CompareStringA
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
HeapSize
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProfileStringA
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
GetStringTypeA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetACP
TlsGetValue
VirtualAlloc
CloseHandle
CreateThread
VirtualQuery
LockFile
FatalAppExitW
CreateConsoleScreenBuffer
IsBadStringPtrA
GetConsoleScreenBufferInfo
BackupRead
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
UnhandledExceptionFilter
TlsSetValue
TlsFree
TlsAlloc
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetConsoleCtrlHandler
RtlUnwind
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
MultiByteToWideChar
MulDiv
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsValidCodePage
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalLock
GlobalHandle

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 126.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1ae707702ee02d771e18118a56890fc

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

advapi32

kernel32

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 39KB - Virtual size: 126.7MB

.rsrc Size: 659KB - Virtual size: 659KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 39KB - Virtual size: 126.7MB

.rsrc
Size: 659KB - Virtual size: 659KB