db3835229c130bac1b655ed376a4a786a066ef22caa20460a0fe2b7fe80ebabd

Sharing

Copy URL Twitter E-mail

General

Target

db3835229c130bac1b655ed376a4a786a066ef22caa20460a0fe2b7fe80ebabd
Size

424KB
MD5

8b97c1b09f32a981be96a434c29472e4
SHA1

e7a8baa33ceb6e994e643bba6928cb18ce1e7aa5
SHA256

db3835229c130bac1b655ed376a4a786a066ef22caa20460a0fe2b7fe80ebabd
SHA512

9e52a832602ec4bca6d59da5f1ee8171f45e804100a73d870a80db144cd3dbb2a450f299189b1107aee62bf640426bbc439476d25371e678f1d3403d2629e26e
SSDEEP

12288:tEZCJvG9qsjwG7NjegBrs/YCMJ40zxABwMx:2ZCJUqAwaBZrs/PMC0FABwMx

Score

N/A

Malware Config

Signatures

Files

db3835229c130bac1b655ed376a4a786a066ef22caa20460a0fe2b7fe80ebabd
.exe windows x86

0592a641c306e0e1fd1860f69fb570fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefFrameProcW
WINNLSGetIMEHotkey
AttachThreadInput
AnyPopup
DlgDirListComboBoxA
SetForegroundWindow
DdeFreeDataHandle
CheckDlgButton
MessageBoxW
RegisterClassExA
SystemParametersInfoA
EnumWindows
EndDeferWindowPos
DdeQueryNextServer
AdjustWindowRect
DestroyWindow
RegisterClassA
SetScrollRange
GetKeyboardLayout
ChangeClipboardChain
DdeAccessData
EnumClipboardFormats
GetUpdateRect
CallWindowProcA
ShowWindow
CreateWindowExA
EnableScrollBar
SetScrollInfo
DefWindowProcW
SetActiveWindow
CreateWindowExW
DrawMenuBar
EnableWindow
SetWindowWord

wininet

RegisterUrlCacheNotification
InternetGetCertByURL

gdi32

SetMapMode
AddFontResourceW
SelectObject
EnableEUDC
StartDocA
GetKerningPairsA
GetObjectA
GetDeviceCaps
DeleteDC
MoveToEx
CreateDCW
SetPolyFillMode
CreateEllipticRgnIndirect
GetDIBColorTable
BeginPath
DeleteObject

kernel32

GetCommandLineA
GetCurrentThread
EnumSystemLocalesA
GetLocaleInfoW
GetModuleHandleW
ExitProcess
SetCurrentDirectoryA
GetCurrentThreadId
GetModuleFileNameW
IsValidCodePage
GetDateFormatA
SetFilePointer
SetEnvironmentVariableA
GetSystemTimeAsFileTime
FindFirstFileW
GetOEMCP
OpenMutexA
SetLastError
GetTickCount
GetEnvironmentStrings
DeleteFiber
ReadFile
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
FlushFileBuffers
GetCurrentProcessId
VirtualProtect
GetEnvironmentStringsW
ContinueDebugEvent
FindAtomA
SetConsoleActiveScreenBuffer
GlobalLock
MoveFileExW
CompareStringW
FreeEnvironmentStringsA
LocalSize
GetFileAttributesW
CreateThread
InitializeCriticalSection
GetProfileSectionA
RtlUnwind
TlsSetValue
GetStdHandle
UnhandledExceptionFilter
HeapFree
SetUnhandledExceptionFilter
CreateMutexA
GetStringTypeW
HeapSize
LCMapStringW
GetLongPathNameA
GetFileType
HeapAlloc
WriteFile
LocalReAlloc
GetProcAddress
FreeEnvironmentStringsW
CompareStringA
SetConsoleScreenBufferSize
GetACP
GetModuleHandleA
SetStdHandle
TlsGetValue
DeleteCriticalSection
InterlockedExchange
GlobalAddAtomA
LoadLibraryA
DeleteAtom
GetUserDefaultLCID
LeaveCriticalSection
GetTimeZoneInformation
GetLastError
HeapCreate
GetVersionExA
FindClose
LocalFileTimeToFileTime
EnterCriticalSection
VirtualLock
GetTimeFormatA
QueryPerformanceCounter
WaitForSingleObjectEx
VirtualFree
TransactNamedPipe
GetCurrentProcess
GetProcessHeaps
TerminateProcess
GetCommandLineW
CreateSemaphoreA
GetStartupInfoA
IsBadWritePtr
TlsAlloc
IsValidLocale
GetCalendarInfoW
CloseHandle
GetLocaleInfoA
LCMapStringA
GetSystemInfo
SetHandleCount
GetStringTypeA
SetLocaleInfoA
TlsFree
GetCPInfo
GetModuleFileNameA
GlobalFindAtomW
HeapDestroy
VirtualAlloc
VirtualQuery

advapi32

CryptEncrypt

shell32

CommandLineToArgvW
SHGetFileInfo
CheckEscapesW
SHLoadInProc

comctl32

CreateUpDownControl
ImageList_EndDrag
InitCommonControlsEx
CreateMappedBitmap

Sections

.text
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0592a641c306e0e1fd1860f69fb570fd

Headers

File Characteristics

Imports

user32

wininet

gdi32

kernel32

advapi32

shell32

comctl32

Sections

.text Size: 160KB - Virtual size: 157KB

.rdata Size: 100KB - Virtual size: 97KB

.data Size: 92KB - Virtual size: 120KB

.rsrc Size: 68KB - Virtual size: 64KB

.text
Size: 160KB - Virtual size: 157KB

.rdata
Size: 100KB - Virtual size: 97KB

.data
Size: 92KB - Virtual size: 120KB

.rsrc
Size: 68KB - Virtual size: 64KB