9f5207f00d3ce97990e57f22a564de382eda7deb4beb49c90134813c9f385b38

Sharing

Copy URL Twitter E-mail

General

Target

9f5207f00d3ce97990e57f22a564de382eda7deb4beb49c90134813c9f385b38
Size

748KB
MD5

b04181dfa28388964c60fcf08e1de7e9
SHA1

1d9cc9ef555cf1d435f91f26b3b1a5fd15759365
SHA256

9f5207f00d3ce97990e57f22a564de382eda7deb4beb49c90134813c9f385b38
SHA512

eb8601c42963342d3b91259c3ea3aceab7592432e696c2577f6c48cec51b8d4bb088d6fb51748618bedf149da26c0ed770a7eb0b18cd3612a557d3ef8283a9aa
SSDEEP

12288:xHD9nGRHjXLZN47TjmrDOhlGwJxP1WtFApVleuJn0mWgeYmH:LGRDbvIm/0PP6K8a0mSYm

Score

N/A

Malware Config

Signatures

Files

9f5207f00d3ce97990e57f22a564de382eda7deb4beb49c90134813c9f385b38
.exe windows x86

369d0b71f5a2b5c63032281d425d4414

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptEnumProviderTypesA
LookupPrivilegeDisplayNameA
LookupAccountSidW
RegEnumValueA
RegEnumKeyW
CryptDuplicateKey
RegDeleteKeyW
RegCloseKey
RegSaveKeyA
RegReplaceKeyW
CryptVerifySignatureW
LogonUserW
RegCreateKeyExA
CryptEncrypt
LookupAccountNameA
CryptDestroyKey
RegCreateKeyW
RegDeleteValueW
CryptSetKeyParam

wininet

IncrementUrlCacheHeaderData
GopherGetLocatorTypeW
InternetGoOnlineW
InternetSecurityProtocolToStringA
RunOnceUrlCache
FindNextUrlCacheContainerA
FindFirstUrlCacheContainerA
GetUrlCacheConfigInfoA
InternetSetFilePointer

gdi32

GetObjectW
Arc

comctl32

ImageList_DragMove
InitCommonControlsEx
ImageList_LoadImageA

user32

CharLowerA
DdeSetUserHandle
SetActiveWindow
SendNotifyMessageW
GetMenuBarInfo
LoadMenuW
SwitchDesktop
CreateWindowStationW
ChangeClipboardChain
PostThreadMessageW
DefWindowProcW
SendMessageTimeoutW
RegisterClassExA
ToUnicodeEx
GetParent
GetCursor
GetMenuDefaultItem
DrawStateW
GetSystemMenu
SystemParametersInfoW
RegisterClassA
WindowFromDC
GetGUIThreadInfo
OffsetRect
GetSysColor
LoadIconW
CreateMDIWindowW
DrawTextA
SetShellWindow
ArrangeIconicWindows
GetKBCodePage
SetClipboardData
InSendMessageEx
SetMenu
GetPriorityClipboardFormat
GetSysColorBrush
DestroyWindow
MapVirtualKeyExA
InsertMenuItemA
RealGetWindowClass
ShowCursor
DdeKeepStringHandle
DlgDirListComboBoxW
GetDC
CreateIconIndirect
LoadImageA
MessageBoxA
BroadcastSystemMessageA
SetKeyboardState
GetUserObjectInformationA
IsIconic
GetDoubleClickTime
GetMenuContextHelpId
GetQueueStatus
ShowWindow
GetSystemMetrics
GetIconInfo
AnimateWindow
LoadMenuA
DlgDirSelectExA
UnhookWinEvent
DdeFreeStringHandle
GetMenu
GetKeyNameTextA
GetTopWindow
SetWindowsHookExW
CreateWindowExW
DdeQueryConvInfo
EndMenu
GetMessageExtraInfo
UnregisterClassA
IsWindow
SetWindowWord

kernel32

SleepEx
ReadConsoleW
GetUserDefaultLCID
GetStringTypeA
WaitNamedPipeW
GetLastError
GetACP
RtlUnwind
GetSystemDefaultLangID
GetLogicalDrives
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
UnhandledExceptionFilter
GetDateFormatA
WriteFile
GetEnvironmentStringsW
GetModuleHandleA
LoadLibraryA
GetVersionExA
EnumSystemLocalesA
GlobalGetAtomNameW
SetStdHandle
InitializeCriticalSection
VirtualQuery
GetLocaleInfoA
SetComputerNameW
LeaveCriticalSection
HeapDestroy
GetTickCount
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetPrivateProfileSectionA
FreeLibrary
InterlockedDecrement
GetCurrentThreadId
SetConsoleWindowInfo
WriteConsoleW
CompareStringW
SetFilePointer
GetCurrentThread
GetProcessHeap
GetOEMCP
EnumResourceTypesA
SetEndOfFile
LCMapStringW
SetLastError
GetConsoleCP
WriteConsoleA
GetCommandLineA
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
ReadFileEx
LoadLibraryExW
GetExitCodeThread
TerminateProcess
GetModuleFileNameA
GetCurrentProcessId
VirtualFree
ExitProcess
FreeEnvironmentStringsA
LoadLibraryW
TlsSetValue
lstrlenA
GlobalFix
IsValidLocale
HeapAlloc
GetProcAddress
DebugBreak
GetCurrentProcess
DeleteCriticalSection
GetSystemDefaultLCID
GetTimeFormatA
CloseHandle
IsBadReadPtr
MapViewOfFile
TlsAlloc
GetConsoleOutputCP
TlsGetValue
SetConsoleCtrlHandler
SetEnvironmentVariableA
CreateFileW
GetCPInfo
ReadFile
GetCommandLineW
OpenSemaphoreA
TryEnterCriticalSection
CreateMutexA
LCMapStringA
SetHandleCount
OpenMutexA
GetEnvironmentStrings
EnterCriticalSection
ReadConsoleOutputW
WriteConsoleInputA
InterlockedIncrement
VirtualAlloc
FreeEnvironmentStringsW
GetLocaleInfoW
RtlFillMemory
IsValidCodePage
HeapCreate
CompareStringA
GetFileType
TlsFree
OutputDebugStringW
GetModuleFileNameW
InterlockedExchange
HeapFree
ConnectNamedPipe
GetStartupInfoA
GetConsoleTitleW
GetStdHandle
HeapReAlloc
FlushFileBuffers
RaiseException
OutputDebugStringA
QueryPerformanceCounter
CreateFileA
HeapValidate
GetConsoleMode

Sections

.text
Size: 316KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

369d0b71f5a2b5c63032281d425d4414

Headers

File Characteristics

Imports

advapi32

wininet

gdi32

comctl32

user32

kernel32

Sections

.text Size: 316KB - Virtual size: 313KB

.rdata Size: 284KB - Virtual size: 282KB

.data Size: 120KB - Virtual size: 143KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 316KB - Virtual size: 313KB

.rdata
Size: 284KB - Virtual size: 282KB

.data
Size: 120KB - Virtual size: 143KB

.rsrc
Size: 24KB - Virtual size: 23KB