31bac6a65cc8d9acddaa20713ea2f25674e824c0fadf2a63d8ac9c6c01b68be6

Sharing

Copy URL

Twitter E-mail

General

Target

31bac6a65cc8d9acddaa20713ea2f25674e824c0fadf2a63d8ac9c6c01b68be6
Size

255KB
MD5

dc18d6c13a02b6b718ac757a021fd1de
SHA1

af1d202faea3831d0cc57466b9686fa34dcf21c5
SHA256

31bac6a65cc8d9acddaa20713ea2f25674e824c0fadf2a63d8ac9c6c01b68be6
SHA512

82c2639ea24793ad1eef19a84b388327ebf1744e1ae5736f02e0f0e0ac21efd25f93ac6d277f5a8bbde57d941681699a1ab574dbda4de696a530bfe30f957682
SSDEEP

6144:bpXbhU5GPtkUtyg89TiqdUyrmII8CBaSlHRQ08Ggsm:xbhKepyhTVU+jMHR58Ggs

Score

N/A

Malware Config

Signatures

Files

31bac6a65cc8d9acddaa20713ea2f25674e824c0fadf2a63d8ac9c6c01b68be6
.exe windows x86

9ca4e6b7645e5eb136ada7c3ce3b2ed9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsUNCA

comdlg32

PrintDlgW
ChooseColorW
GetSaveFileNameA
ChooseFontW
GetOpenFileNameW

user32

SendMessageA
GetFocus
LoadImageW
DestroyCaret
GetKeyboardLayoutList
GetClassInfoExA
ShowScrollBar
CharUpperBuffA
CreateAcceleratorTableW
SetWindowPlacement
GetNextDlgTabItem
SendNotifyMessageW
RemoveMenu
wsprintfA
DrawFrameControl
SendDlgItemMessageW
MessageBoxExW
GetWindow
FindWindowExW
GetMenuItemInfoW
UpdateWindow
GetMenuItemRect
SetLastErrorEx
InflateRect
DrawTextA
IsZoomed
DeferWindowPos
GetNextDlgGroupItem
RegisterHotKey
IsDialogMessageA
IsCharUpperA
DialogBoxIndirectParamA
GetUpdateRect
PostThreadMessageA
GetSystemMenu
CallWindowProcA
SetWindowPos
SystemParametersInfoA
CreatePopupMenu
SetPropW
ChildWindowFromPointEx
LockWindowUpdate
GetUserObjectInformationA
AppendMenuA
GetClassInfoExW
InsertMenuItemW
IsDialogMessageW
LoadCursorA
DispatchMessageW
GetMenuItemID
GetIconInfo
GetCaretPos
EnableWindow
ReplyMessage
WindowFromPoint
GetMessageW
GetTopWindow
ScrollWindowEx
DrawEdge
FillRect
GetMonitorInfoW
RegisterWindowMessageW
BeginPaint
ArrangeIconicWindows
RegisterWindowMessageA
SendInput
SetMenu
MapVirtualKeyA
GetMessageExtraInfo
DestroyMenu
AllowSetForegroundWindow
InSendMessage
RemovePropW
SetForegroundWindow
DrawStateA
OpenIcon
CharLowerBuffW
MonitorFromRect
GetCursorPos
RegisterClassW
CheckMenuItem
BeginDeferWindowPos
SetDlgItemTextA
GetDlgItem
IsCharAlphaW
CreateDialogParamW
OemToCharBuffA
LoadMenuA
GetMenuState
GetWindowTextLengthW
CheckRadioButton
DefWindowProcA
DefFrameProcA
IsWindowUnicode
GetKeyState
CharToOemA
TileWindows
DestroyAcceleratorTable
IsWindow
DrawMenuBar
MapVirtualKeyExW
DestroyIcon
GetClipCursor
MessageBoxW
LoadIconW
ScrollWindow
SetCursorPos
ModifyMenuW
GetPropW
HiliteMenuItem
InvalidateRgn
AppendMenuW
EndDialog
SetWindowLongW
TranslateMessage
MessageBoxExA
ValidateRect
LoadImageA
CopyRect
GetClassLongW
SetRect

msvcrt

atoi
strcspn
vsprintf
isalnum
strtok
perror
strncpy
free
wcscspn
fwrite
_controlfp
time
iswdigit
__set_app_type
wcstod
fread
isdigit
__p__fmode
toupper
printf
__p__commode
_amsg_exit
puts
_initterm
fseek
clearerr
isupper
_ismbblead
towlower
malloc
isxdigit
setvbuf
fputs
mbstowcs
_XcptFilter
memset
atol
strerror
strtoul
_exit
swprintf
_cexit
fgets
__setusermatherr
iswctype
__getmainargs
qsort
realloc
wcstoul
strrchr

kernel32

TlsGetValue
FreeResource
RemoveDirectoryW
Sleep
LCMapStringW
CreateNamedPipeA
SetFilePointer
ResumeThread
CreatePipe
lstrcpyA
GetStartupInfoA
lstrlenW
GetCommConfig
AreFileApisANSI
GetWindowsDirectoryA
RegisterWaitForSingleObject
SetSystemTime
VirtualFree
WaitCommEvent
SetPriorityClass
GetFileAttributesExW
lstrcatW
TlsSetValue
VirtualProtect
GlobalFindAtomW
FileTimeToDosDateTime
IsBadWritePtr
GetTimeFormatA
CreateWaitableTimerA
GlobalMemoryStatus
SetFileTime
SuspendThread
SetHandleInformation
GetShortPathNameA
OpenFile
ResetEvent
GetCommState
FormatMessageW
CreateEventA
HeapWalk
RemoveDirectoryA
SetThreadPriority
GetLastError
SearchPathW
InitializeCriticalSection
GlobalAddAtomW
GetBinaryTypeA
GetSystemDefaultUILanguage
ExitThread
DeleteFileA
SetTimerQueueTimer
VirtualQuery
GetDateFormatA
EnumSystemLocalesA
DisconnectNamedPipe

Exports

Exports

?ForwardControlItem@@YGK_KK:O

Sections

.itext
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ips1
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips2
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ips3
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ips4
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ca4e6b7645e5eb136ada7c3ce3b2ed9

Headers

File Characteristics

Imports

shlwapi

comdlg32

user32

msvcrt

kernel32

Exports

Exports

Sections

.itext Size: 21KB - Virtual size: 21KB

.ips1 Size: 6KB - Virtual size: 5KB

.ips2 Size: 512B - Virtual size: 88B

.read Size: 1024B - Virtual size: 404KB

.ips3 Size: 512B - Virtual size: 192B

.data Size: 3KB - Virtual size: 2KB

.ips4 Size: 66KB - Virtual size: 65KB

.rsrc Size: 153KB - Virtual size: 153KB

.reloc Size: 2KB - Virtual size: 1KB

.itext
Size: 21KB - Virtual size: 21KB

.ips1
Size: 6KB - Virtual size: 5KB

.ips2
Size: 512B - Virtual size: 88B

.read
Size: 1024B - Virtual size: 404KB

.ips3
Size: 512B - Virtual size: 192B

.data
Size: 3KB - Virtual size: 2KB

.ips4
Size: 66KB - Virtual size: 65KB

.rsrc
Size: 153KB - Virtual size: 153KB

.reloc
Size: 2KB - Virtual size: 1KB