19e890e3d825f7a2b2666e807e9f1156348553a9c5a9781a7b40966d2d0ca41b

Sharing

Copy URL Twitter E-mail

General

Target

19e890e3d825f7a2b2666e807e9f1156348553a9c5a9781a7b40966d2d0ca41b
Size

836KB
MD5

e56d91f3e9420d6e20b51bb12d19dc91
SHA1

32f8678425b5aee6740ebde4eff7fa7f7f317934
SHA256

19e890e3d825f7a2b2666e807e9f1156348553a9c5a9781a7b40966d2d0ca41b
SHA512

e95c8ca67c9deeb642b7090a1f05da65b6f12576a4035f993fd2fb030da2360fd43fa3ee557438f1708b857b730b38c3d5261fa2d7be023f880107279b82ac4a
SSDEEP

24576:rFtMYfoBm7X4veTYjM0tk/c9QuycssOEyhRtLPTuxeTK:r/vfoB9jMAkLHmyVLbq

Score

N/A

Malware Config

Signatures

Files

19e890e3d825f7a2b2666e807e9f1156348553a9c5a9781a7b40966d2d0ca41b
.exe windows x86

9ac2a90c92826146201dc0b443f08abb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
GetMenuStringA
CreateIconFromResourceEx
CharToOemA
SetMenu
InsertMenuItemW
CreateIconFromResource
InSendMessageEx
OpenInputDesktop
SetDebugErrorLevel
ToUnicodeEx
DdeConnectList
CreateCaret
RemovePropA
CreateWindowExW
CreateMenu
DialogBoxParamW
GetKeyboardState
SetDlgItemTextA
ExcludeUpdateRgn
MonitorFromRect
IsCharLowerA
DefWindowProcA
ExitWindowsEx
DdeConnect
DestroyWindow
ShowWindow
AppendMenuA
AppendMenuW
GetMenuItemCount
EndPaint
GetDoubleClickTime
SetKeyboardState
MenuItemFromPoint
CharPrevA
DrawFrame
DefMDIChildProcA
PeekMessageW
wsprintfA
GetCursorPos
DestroyCursor
PostThreadMessageA
RegisterDeviceNotificationW
DestroyCaret
GetWindowContextHelpId
GetKeyState
ReuseDDElParam
EnumDisplaySettingsExA
RegisterClassA
LoadIconA
SetScrollPos
MessageBoxW
InvertRect
RegisterDeviceNotificationA
SetPropA
DialogBoxIndirectParamW
GetTabbedTextExtentA
SetTimer
RegisterClassExA
SetScrollInfo
GetUserObjectSecurity
RegisterHotKey
GetMessageA
IsCharLowerW
DdeReconnect
ChangeDisplaySettingsExA
GrayStringW
PostMessageA

comctl32

GetEffectiveClientRect
ImageList_SetDragCursorImage
ImageList_Write
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_LoadImageW
CreateStatusWindowW
CreateToolbar
ImageList_Draw
MakeDragList
ImageList_SetImageCount
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_GetImageInfo

shell32

SHGetFileInfo

kernel32

FindFirstFileA
ReadConsoleOutputA
CompareStringW
FindAtomW
GetOEMCP
SetFilePointer
WaitNamedPipeA
GetVersionExW
GetTempPathW
OpenMutexA
GetCurrentProcess
IsValidCodePage
HeapReAlloc
VirtualAlloc
SetHandleCount
DeleteCriticalSection
MultiByteToWideChar
CreatePipe
WritePrivateProfileStructW
TlsFree
GetStdHandle
GlobalFree
DeleteFileA
GlobalFindAtomW
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
QueryPerformanceCounter
GetSystemInfo
VirtualQuery
GetProcessShutdownParameters
IsDebuggerPresent
HeapDestroy
PulseEvent
HeapCreate
WriteConsoleOutputA
ExitProcess
ReleaseMutex
InterlockedExchange
SetConsoleTextAttribute
GetFileType
GetExitCodeThread
SetEnvironmentVariableA
GetSystemDirectoryW
GetProcAddress
GetTimeFormatA
TlsSetValue
GetVersionExA
GetACP
lstrcmp
CommConfigDialogW
ReadConsoleInputA
AddAtomA
HeapFree
IsBadWritePtr
SetThreadAffinityMask
SleepEx
CreateProcessA
FlushFileBuffers
DebugActiveProcess
CloseHandle
FreeEnvironmentStringsW
GetStringTypeA
GetCurrentThreadId
SetVolumeLabelA
EnumSystemLocalesA
HeapLock
CreateMutexA
TlsAlloc
LCMapStringA
TerminateProcess
WideCharToMultiByte
GetEnvironmentStrings
GetStartupInfoA
GetCurrentThread
ReadFile
GetCalendarInfoA
IsValidLocale
GetStringTypeW
VirtualFree
ConnectNamedPipe
CompareStringA
GetDateFormatA
UnhandledExceptionFilter
GetLocaleInfoA
GetDateFormatW
SetFileTime
GetUserDefaultLCID
GetTickCount
GlobalAddAtomW
InitializeCriticalSection
GetThreadContext
RtlUnwind
SetStdHandle
WritePrivateProfileStringA
RtlFillMemory
EnumDateFormatsExA
ExpandEnvironmentStringsW
GetCPInfo
GetWindowsDirectoryW
GetTimeZoneInformation
GetModuleFileNameA
EnumTimeFormatsW
LeaveCriticalSection
HeapSize
LoadLibraryA
TlsGetValue
SetLastError
GetCommandLineA
TransmitCommChar
GetCurrencyFormatA
GetSystemTimeAsFileTime
LCMapStringW
GetEnvironmentStringsW
CommConfigDialogA
GetCurrentProcessId
GetModuleHandleA
GetPrivateProfileIntA
FindFirstFileExW
GetLastError
VirtualProtect
lstrcpynW
GetLocaleInfoW
GetLocalTime
WriteFile
EnterCriticalSection
FreeEnvironmentStringsA
GetCommandLineW
HeapAlloc

wininet

InternetOpenA
HttpOpenRequestA
FtpFindFirstFileW
FindFirstUrlCacheEntryExW

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ac2a90c92826146201dc0b443f08abb

Headers

File Characteristics

Imports

user32

comctl32

shell32

kernel32

wininet

Sections

.text Size: 252KB - Virtual size: 251KB

.rdata Size: 404KB - Virtual size: 403KB

.data Size: 140KB - Virtual size: 137KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 252KB - Virtual size: 251KB

.rdata
Size: 404KB - Virtual size: 403KB

.data
Size: 140KB - Virtual size: 137KB

.rsrc
Size: 36KB - Virtual size: 33KB