928333eacd7b5acfbbd432cc8388b26c414ef0634ca12fc0cdab851cc2ba566a

Sharing

Copy URL Twitter E-mail

General

Target

928333eacd7b5acfbbd432cc8388b26c414ef0634ca12fc0cdab851cc2ba566a
Size

178KB
MD5

21a390a0caabb4375caa79082148bb2b
SHA1

cce271c6afa05f66ed6cbecf6bb1bf429eb45052
SHA256

928333eacd7b5acfbbd432cc8388b26c414ef0634ca12fc0cdab851cc2ba566a
SHA512

121c942a9539d563e2d5059e5d54c76fb495a478d8e9229e8bb956efedd28c631a08137884de5f6bb4c0d49c18336e61b238d7febe1f0bb100607dd715936b99
SSDEEP

3072:TLNXW1XLXqwm8Gyza2xtwXLwQwUat1EiTvF5IJptzB749Qt8s:TLNaXzqwm4xGba4i7F5IJh71

Score

N/A

Malware Config

Signatures

Files

928333eacd7b5acfbbd432cc8388b26c414ef0634ca12fc0cdab851cc2ba566a
.exe windows x86

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

QueryWorkingSet

user32

DialogBoxParamW
BringWindowToTop
EnableScrollBar
LoadStringW
AttachThreadInput
AdjustWindowRectEx
PtInRect
HiliteMenuItem
GetMenuState
RemovePropW
CharNextA
InsertMenuItemW
InvalidateRgn
DrawTextA
InSendMessage
GetWindowRect
GrayStringW
RegisterWindowMessageW
DefWindowProcW
GetWindowTextW
CreateMenu
GetClassLongA
GetScrollInfo
SetCursorPos
RemoveMenu
FindWindowW
SetClassLongW
CallWindowProcA
GetWindowLongW
SetWindowTextW
SetRect
GetFocus
GetKeyboardLayout
GetWindowDC
CreateCaret
ChildWindowFromPointEx
UpdateWindow
InSendMessageEx
EnumChildWindows
DragObject
IsWindowEnabled
DefWindowProcA
LoadCursorA
GetForegroundWindow
SetLastErrorEx
MessageBoxExW
CharNextW
DialogBoxIndirectParamA
LookupIconIdFromDirectory
mouse_event
DeleteMenu
GetSysColor
DefFrameProcA
TrackPopupMenu
MessageBoxW
TabbedTextOutW
wvsprintfA
MonitorFromRect
DialogBoxParamA
OpenIcon
ShowScrollBar
RegisterClassW
GetUpdateRgn
ShowCursor
wsprintfW
GetKeyState
ShowWindow
GetMenuCheckMarkDimensions
GetScrollPos
InvertRect
EndPaint
GetClipCursor
CreateWindowExA
SetMenuItemBitmaps
GetShellWindow
DispatchMessageW
GetUpdateRect
LoadIconA
DestroyAcceleratorTable
GetClassLongW
DestroyCursor
IsChild
BeginDeferWindowPos
DrawIcon
GetKeyboardLayoutNameW
DrawTextExW
GetDlgItemInt
CheckRadioButton
CharPrevW
InsertMenuW
CascadeWindows
DrawTextW
SetWindowRgn
GetTopWindow
AdjustWindowRect
SetDlgItemTextA
LoadBitmapW
DefDlgProcA
ModifyMenuW
GetClassInfoExW
GetMessageExtraInfo
InternalGetWindowText
SetRectEmpty
RegisterWindowMessageA
GetSubMenu
CharUpperW

kernel32

GetDateFormatA
GetVersion
RegisterWaitForSingleObject
GetNumberFormatA
FindNextFileW
FileTimeToDosDateTime
FindResourceExW
GetStringTypeExW
SetThreadAffinityMask
GetBinaryTypeA
GetPriorityClass
VirtualFree
GetThreadLocale
GetTempPathA
AreFileApisANSI
GetProcAddress
DisconnectNamedPipe
VirtualAlloc
CloseHandle
FileTimeToLocalFileTime
CreateEventA
SetCommBreak
GetTickCount
GetComputerNameW
GetShortPathNameW
GetSystemDirectoryA
GetUserDefaultLCID
GlobalHandle
GetCompressedFileSizeW
TransactNamedPipe
LocalFree
GlobalFlags
SleepEx
GetFileType
VerifyVersionInfoW
GetModuleHandleW
IsBadReadPtr
EnterCriticalSection
CreateMutexA
VirtualProtect
SystemTimeToFileTime
CreateFileW
GetStartupInfoA
WaitForMultipleObjects
GlobalDeleteAtom
EnumResourceNamesA
CreateFileA
GetSystemDefaultLangID
GetThreadTimes
GetUserDefaultUILanguage
EscapeCommFunction
SetSystemTime
SetFileApisToOEM
LockResource
lstrlenA
GetFileAttributesW
GetCurrentThreadId
CopyFileW
LoadLibraryExW
SetCommTimeouts
lstrcatA
LoadResource
HeapValidate
GetThreadContext
SetWaitableTimer
DuplicateHandle
SetFileAttributesA
WaitForSingleObjectEx
GetCommModemStatus
CreateWaitableTimerW
SetHandleInformation
CreateFileMappingA
LocalUnlock
lstrcpynW
GetLastError
WaitForMultipleObjectsEx
UnmapViewOfFile
GetCommState
FindClose
FoldStringW
FormatMessageW
DeviceIoControl
GetLocalTime
WideCharToMultiByte
GetHandleInformation
MoveFileA
IsBadWritePtr
LoadLibraryExA
FindFirstChangeNotificationW
ReleaseMutex
LockFile
CancelIo
FindFirstFileW
IsDBCSLeadByte
AddAtomA
CreateDirectoryA
FileTimeToSystemTime
GlobalFree
lstrcatW
LocalReAlloc
GetTimeFormatW
SetFilePointer
GlobalMemoryStatusEx
LCMapStringW
SizeofResource
LeaveCriticalSection

rtutils

TracePrintfW

Exports

Exports

DeleteMemoryOld
FormatConfigExW
IsNotKeyNameW
GlobalPointerW
CallProject
InstallSizeEx
FormatAppNameNew
GeneratePointerW
DecrementCharW
IsValidProfileOld
IsNotPointEx
InstallDirectory
CloseFileNew
ProjectOld
LoadProjectW
ValidateFolderPathW
FindHeaderW
PutConfigA
FormatMutantEx
RemoveFullNameExA
ShowDate
EnumPenW
EnumTaskA
CallModuleExA
CallDateTimeA
IsValidObjectExW
GlobalAppNameOriginal
CallWidthW
ValidateMonitorA
CallPenW
IncrementProcessExA
CloseAnchorExW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.On59
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

File Characteristics

Imports

psapi

user32

kernel32

rtutils

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.Reel Size: 2KB - Virtual size: 5KB

.On59 Size: 5KB - Virtual size: 4KB

.Re82 Size: 23KB - Virtual size: 23KB

.Lax503 Size: 512B - Virtual size: 296B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.Reel
Size: 2KB - Virtual size: 5KB

.On59
Size: 5KB - Virtual size: 4KB

.Re82
Size: 23KB - Virtual size: 23KB

.Lax503
Size: 512B - Virtual size: 296B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB