a3b41a1646763a55b4d1530d8cff3444be5a20bf6123bb95f5e396f01f5200e9

Sharing

Copy URL

Twitter E-mail

General

Target

a3b41a1646763a55b4d1530d8cff3444be5a20bf6123bb95f5e396f01f5200e9
Size

252KB
MD5

ce9b56c4c4e47d05fc99395347388cde
SHA1

191f014a70b17994b997a1fb645e2d5987062713
SHA256

a3b41a1646763a55b4d1530d8cff3444be5a20bf6123bb95f5e396f01f5200e9
SHA512

b9b900950d941f4498a2b8ee7e224e965ece1d911d8a7b13ee4640c546a3ba2e728b5805fb7c5b840d07c3c8feef8c2cba388a59de2e8549fde6cb11f74f01bb
SSDEEP

6144:nXCV+v8JGSrN3vyyJ32ZVA+ACDkQozAAIM/KyA:Zv8MS1yOmZVgzAAMyA

Score

N/A

Malware Config

Signatures

Files

a3b41a1646763a55b4d1530d8cff3444be5a20bf6123bb95f5e396f01f5200e9
.exe windows x86

2eebe7b4fe850874bee3c267e18a66a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
GetStringTypeA
GetEnvironmentStrings
SetUnhandledExceptionFilter
LeaveCriticalSection
HeapDestroy
ResetEvent
SizeofResource
GetLocaleInfoA
GlobalFree
GlobalLock
lstrlenA
CreateDirectoryW
FileTimeToLocalFileTime
CreateFileMappingA
GlobalAlloc
LockResource
FileTimeToSystemTime
WaitForSingleObjectEx
SetFilePointer
InterlockedExchange
GetModuleHandleW
LoadLibraryA
EnterCriticalSection
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
LCMapStringW
MultiByteToWideChar
InterlockedExchangeAdd
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetCurrentThread
GetLastError
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
LoadLibraryExW
FindCloseChangeNotification
GetExitCodeProcess
GetSystemTimeAsFileTime
VirtualAllocEx
FindFirstFileA
FormatMessageA
GetCurrentProcessId
GetCommandLineW
SetFilePointerEx
FindResourceW
FreeEnvironmentStringsW
GetConsoleCP
GetFileAttributesA
SetLastError
ExitProcess
FindNextFileW
CreateProcessW
CreateEventW
WaitForSingleObject
FreeEnvironmentStringsA
LCMapStringA
SetStdHandle
FindFirstFileW
GetCurrentThreadId
GetConsoleOutputCP
IsValidCodePage
DeleteCriticalSection
DeleteFileA
LocalAlloc
GlobalUnlock
DeleteFileW
InterlockedCompareExchange
GetSystemInfo
Sleep
GetStartupInfoW
CreateEventA
OutputDebugStringA
ReleaseMutex
GetVersionExW
WriteConsoleW
lstrlenW
WaitForMultipleObjects
CompareStringW
GetProcAddress
SetEnvironmentVariableA

user32

GetDlgItemInt
GetCursorPos
DestroyWindow
ShowWindowAsync
SetForegroundWindow
IsWindowVisible
InvalidateRect
IsWindowEnabled
GetSystemMetrics
GetClientRect
MessageBoxA
GetDlgItemTextA
GetWindowLongW
GetWindowDC
GetWindowPlacement
SetWindowPos
GetWindowTextW
GetWindowTextLengthW
GetWindowLongA
LoadStringA
GetDlgItem
GetWindowThreadProcessId
PostQuitMessage
GetSysColorBrush
BeginPaint
EndDialog
GetDlgItemTextW
SetCursor
GetWindowRect
SetRectEmpty
ReleaseDC
GetDCEx
GetMenuItemCount
TranslateMessage
LoadStringW
GetParent
ShowWindow
MessageBoxW
EnableWindow
GetWindowTextLengthA
GetWindowTextA
SetTimer
EndPaint
GetDesktopWindow
SendMessageA
IsWindowUnicode

gdi32

ExtTextOutW
SetTextColor
LineTo
SetStretchBltMode
GetStockObject
BitBlt
DeleteDC
GetTextExtentPoint32W
SelectPalette
GetObjectA
SetMapMode
SetViewportOrgEx
RestoreDC
MoveToEx
SetWindowOrgEx
GetObjectW
CreateFontIndirectA
GetStretchBltMode
GetDeviceCaps
CreateRectRgnIndirect
StretchBlt
ExtCreatePen
SaveDC
SetBkColor
RealizePalette
SelectObject
PatBlt
Rectangle
GetClipBox
CreatePalette
CreateCompatibleDC
CreateBitmap
ExtSelectClipRgn
ExtTextOutA
DeleteObject
CreatePenIndirect
SetBkMode
RectVisible
SelectClipRgn
CreateDIBSection
CreateCompatibleBitmap
CreateFontIndirectW
CreateSolidBrush
CreateDIBitmap

ole32

StringFromCLSID
CLSIDFromProgID
CoCreateInstance
CoRevokeClassObject
CoTaskMemFree
CoCreateGuid
OleRun
CoUninitialize
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium
CoLockObjectExternal
CoFreeUnusedLibraries
CoDisconnectObject
RevokeDragDrop
RegisterDragDrop
CoInitializeSecurity
CreateILockBytesOnHGlobal
CoQueryProxyBlanket
CreateStreamOnHGlobal
CLSIDFromString
GetRunningObjectTable
OleFlushClipboard
StgCreateDocfileOnILockBytes
CoInitialize
CreateBindCtx
CoGetClassObject
OleInitialize
CoTestCancel
OleRegGetUserType
OleUninitialize

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2eebe7b4fe850874bee3c267e18a66a2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 160KB - Virtual size: 279KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 160KB - Virtual size: 279KB

.rsrc
Size: 24KB - Virtual size: 23KB