91246108032ea59afe43ef3282bf0112ae2e69039a18f911bf8b13bb8486f4d7

Sharing

Copy URL Twitter E-mail

General

Target

91246108032ea59afe43ef3282bf0112ae2e69039a18f911bf8b13bb8486f4d7
Size

311KB
MD5

17b9c8110cfc5e83dec8e18f99cd6aa3
SHA1

19c7aa08aa916290a1b3789c23dcb8ef527a17c3
SHA256

91246108032ea59afe43ef3282bf0112ae2e69039a18f911bf8b13bb8486f4d7
SHA512

06923dc6a3507ae01a70b1982dd1a1ab33769b3eeb45cf93d6fb6354438aac059dbfe2691ae6a84f42bd8a4f5f1d1521a515d7f4d7629511a9cdf3c4b91a9778
SSDEEP

6144:OJQAiKfDpXrIxQEEc4RtxPvK3gF/XDcciEjEckbsYXZ7ix+Holm:xAiYBZEV4RtxXkgF/XDW+kbsEZ76+Io

Score

N/A

Malware Config

Signatures

Files

91246108032ea59afe43ef3282bf0112ae2e69039a18f911bf8b13bb8486f4d7
.exe windows x86

fe5aba23d88d8190b63d91f7c0b8f698

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
VirtualAllocEx
LocalAlloc
ExpandEnvironmentStringsW
CreateMutexW
lstrcpynA
CopyFileExW
lstrcmpW
GetMailslotInfo
GetSystemInfo
WinExec
OpenFile
GetProcessHeaps
CreateMutexA
GetAtomNameW
FindResourceW
SetCalendarInfoA
SetComputerNameA
OpenSemaphoreW
MoveFileW
ConnectNamedPipe
IsBadStringPtrA
GetCurrentDirectoryW
GetACP
FindAtomW
lstrlenA
CreateNamedPipeW
CreateDirectoryA
CreateMailslotA
SetLocaleInfoW
EnumCalendarInfoA
GetComputerNameA
GetShortPathNameA
LoadResource
GetNumberFormatA
FileTimeToDosDateTime
GlobalFindAtomW
GetTimeFormatW
GetUserDefaultLCID
SetCalendarInfoW
IsValidCodePage
RemoveDirectoryW
AddAtomW
WaitForMultipleObjects
SetComputerNameW
LocalFree
lstrcpyn
GetHandleInformation
CreateMailslotW
GetExitCodeThread
GetTempFileNameA
GetLocalTime
SetUnhandledExceptionFilter
lstrcpyA
lstrcatA
GetCalendarInfoW
GlobalGetAtomNameW
Beep
DuplicateHandle

user32

SendDlgItemMessageW
DestroyIcon
RegisterClassW
CharUpperW
GetDCEx
RegisterWindowMessageA
SendDlgItemMessageA
CharPrevA
MessageBoxA
MonitorFromRect
CheckMenuItem
DialogBoxIndirectParamW
GetMenuStringA
GetSystemMetrics
IsChild
WaitForInputIdle
GetForegroundWindow
LoadImageA
keybd_event
GetClassInfoW
AppendMenuA
SetCursorPos
CharUpperA
EmptyClipboard
EndDialog
ShowWindow
PostMessageA
WinHelpW
LoadImageW
InsertMenuA
GetActiveWindow
DialogBoxParamW
RegisterClassA
CreateMenu
CreateDialogIndirectParamW
LoadMenuIndirectW
LoadMenuW
MoveWindow
MessageBeep
FindWindowW
InvalidateRect
AdjustWindowRect
GetScrollPos
GetMenuInfo
OffsetRect
SetDlgItemTextA
TrackPopupMenuEx
AppendMenuW
FindWindowA
LoadBitmapA
UnregisterClassA
DestroyCursor
LoadCursorW
EnumClipboardFormats
CharLowerW
GetFocus
LoadIconA
LoadMenuIndirectA
GetDlgItemTextW
WinHelpA
RemoveMenu
GetKeyboardLayout
wvsprintfA
DefWindowProcA
MessageBoxW
GetKeyState
GetMenuItemRect
RegisterClassExW
GetMenuItemInfoW
GetMenuStringW
IsIconic
CreateDesktopA
MonitorFromPoint
CreateAcceleratorTableA
CopyRect
GetMenuItemCount
SetDlgItemInt
CreateWindowExW
ShowCaret
GetMenuState
ActivateKeyboardLayout
mouse_event
wvsprintfW
MessageBoxIndirectA
RegisterClassExA
GetMenu
PeekMessageW
MessageBoxIndirectW
LoadCursorA
RegisterWindowMessageW
SetWindowTextW
PeekMessageA
GetAsyncKeyState
GetCapture
LoadMenuA
IsWindow
wsprintfW
OpenClipboard
SetCursor
InvalidateRgn
SetFocus
CreateAcceleratorTableW
wsprintfA
EndMenu
CreateWindowExA
GetIconInfo
CharNextA
InsertMenuItemA
UpdateLayeredWindow
SetWindowRgn
DialogBoxParamA
IsDlgButtonChecked
SetForegroundWindow
SetActiveWindow
GetSubMenu
DestroyMenu
GetMessageW
InsertMenuItemW
GetTopWindow
GetCursorPos
TrackPopupMenu
GetKeyboardType
CharLowerA
GetSysColor
GetDlgItemInt
GetMenuItemID
DialogBoxIndirectParamA
GetWindowRgn
PostQuitMessage
EnableMenuItem
EnumWindows
SetWindowTextA
EnableWindow
MonitorFromWindow
GetDesktopWindow
GetMessageA
UnregisterClassW
IsMenu
GetClassInfoExA
SetWindowPos
GetClassInfoA
GetDlgItemTextA
LoadBitmapW
WaitMessage
LoadIconW
DefWindowProcW
CreatePopupMenu
SendMessageW
GetMenuItemInfoA
SetParent
CharNextW
SetWindowLongW
SetDlgItemTextW
PostMessageW
CreateDialogIndirectParamA
GetClassInfoExW

gdi32

CreatePen
SetEnhMetaFileBits
CreateDIBPatternBrush
CreateFontA
CreateMetaFileW
GetStockObject
CreatePolyPolygonRgn
CreatePolygonRgn
SetMetaFileBitsEx
TranslateCharsetInfo
CreateRoundRectRgn
ExtCreateRegion
GetEnhMetaFileA
RemoveFontResourceA
CreateCompatibleDC

tapisrv

ServiceMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe5aba23d88d8190b63d91f7c0b8f698

Headers

File Characteristics

Imports

kernel32

user32

gdi32

tapisrv

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 6KB - Virtual size: 421KB

.data Size: 270KB - Virtual size: 5.8MB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 6KB - Virtual size: 421KB

.data
Size: 270KB - Virtual size: 5.8MB

.rsrc
Size: 12KB - Virtual size: 11KB