03994113e678d514160b50093eb5247c55b160d088dcdb57c44d97ef3229c852

Sharing

Copy URL

Twitter E-mail

General

Target

03994113e678d514160b50093eb5247c55b160d088dcdb57c44d97ef3229c852
Size

372KB
MD5

8dccb2471612642870c985301c3fa311
SHA1

6f905510bf8a03a1a6e3586921be28be2add6d57
SHA256

03994113e678d514160b50093eb5247c55b160d088dcdb57c44d97ef3229c852
SHA512

b5a0b5b2d6c2dbe6b293eb943c3ad9f2c6f5e5a628b1096bc432a807995407e585293adecd3902c1f34203d153428244dfbea4f1d97bd152e400434efc1ad355
SSDEEP

6144:Rd4wGvbXAyBfmkydKZGAj+iKad2sDuTBLwKGtPVd:n30lBfmk0KwOnysatGtPV

Score

N/A

Malware Config

Signatures

Files

03994113e678d514160b50093eb5247c55b160d088dcdb57c44d97ef3229c852
.exe windows x86

9f7596b475b6e38a1236668c09d92b7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW

user32

DefFrameProcW
CheckRadioButton
EnumDesktopsW
RegisterClassA
RegisterClassExA
SetMenuItemBitmaps
CreateWindowExW
DrawAnimatedRects
MessageBoxA
DefWindowProcA
DdeDisconnectList
PostThreadMessageW
wvsprintfW
GrayStringA
GetShellWindow
GetListBoxInfo
ShowWindow
CharNextW
BringWindowToTop
UnregisterDeviceNotification
BlockInput
SetDoubleClickTime
ScrollDC
DestroyWindow
LoadMenuW
EnableWindow

comctl32

CreatePropertySheetPageW
InitCommonControlsEx
ImageList_BeginDrag

shell32

ShellExecuteEx
SHGetSpecialFolderPathA

wininet

InternetGetCertByURL
UnlockUrlCacheEntryFile
FtpFindFirstFileA
InternetDialA
GopherOpenFileW

kernel32

VirtualQuery
SetHandleCount
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
CompareStringW
EnterCriticalSection
HeapSize
GetVersionExA
GetProcAddress
GetCurrentThread
GetEnvironmentStringsW
SetStdHandle
GetSystemTimeAsFileTime
GetModuleFileNameW
GetACP
GetCurrentProcessId
LCMapStringW
GetProcessHeap
HeapAlloc
LeaveCriticalSection
GetEnvironmentStrings
Sleep
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
IsDebuggerPresent
GetModuleHandleA
GetTickCount
FreeLibrary
EnumSystemLocalesA
GetConsoleOutputCP
QueryPerformanceCounter
IsValidLocale
TlsSetValue
TerminateProcess
SetEnvironmentVariableA
TlsFree
UnhandledExceptionFilter
WriteFile
TlsAlloc
ExpandEnvironmentStringsA
TlsGetValue
GetComputerNameW
CreateMutexA
InterlockedDecrement
GetLastError
OpenMutexA
SetUnhandledExceptionFilter
GetStartupInfoA
RtlUnwind
VirtualFree
ExitProcess
InterlockedExchange
WriteConsoleA
GetLocaleInfoW
WriteConsoleW
GetConsoleMode
GetStringTypeW
GetOEMCP
CompareStringA
VirtualAlloc
IsValidCodePage
GetCommandLineA
LoadLibraryA
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetTimeFormatA
HeapCreate
GetStdHandle
GetCPInfo
GetUserDefaultLCID
SetLastError
GetConsoleCP
GetLocaleInfoA
InterlockedIncrement
SetConsoleCtrlHandler
GetDateFormatA
HeapDestroy
GetModuleFileNameA
GetPrivateProfileSectionNamesA
CreateFileA
GetCurrentProcess
GetStartupInfoW
GetCurrentThreadId
FlushFileBuffers
SetFilePointer
ReadFile
GetCommandLineW
GetTimeZoneInformation
HeapFree
GetStringTypeA
GetFileType

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f7596b475b6e38a1236668c09d92b7b

Headers

File Characteristics

Imports

comdlg32

user32

comctl32

shell32

wininet

kernel32

Sections

.text Size: 92KB - Virtual size: 88KB

.rdata Size: 92KB - Virtual size: 89KB

.data Size: 92KB - Virtual size: 119KB

.rsrc Size: 92KB - Virtual size: 88KB

.text
Size: 92KB - Virtual size: 88KB

.rdata
Size: 92KB - Virtual size: 89KB

.data
Size: 92KB - Virtual size: 119KB

.rsrc
Size: 92KB - Virtual size: 88KB