4ab99448654be51fb20530836ee02afa13fdbcf1bcd1475bb8981d9ab1ddf040

Sharing

Copy URL Twitter E-mail

General

Target

4ab99448654be51fb20530836ee02afa13fdbcf1bcd1475bb8981d9ab1ddf040
Size

196KB
MD5

130df1a1e5fa31e8b164740eb27ad3b0
SHA1

457548d1f5d51dc669ea842f0a3b6981a366bd19
SHA256

4ab99448654be51fb20530836ee02afa13fdbcf1bcd1475bb8981d9ab1ddf040
SHA512

df9564d743fea6e0493a5c3f94e0c76ff2302a3905f58de9dfad6aaa8d718281ff643ca2d87872324e991c073d096f1a6543b0de39bff3e5e8099ba11862ebda
SSDEEP

6144:4taLQRfeoW7JBxk7QlCkukItPgbMl3/IhozB3:iuQE756ksPgsvIYB

Score

N/A

Malware Config

Signatures

Files

4ab99448654be51fb20530836ee02afa13fdbcf1bcd1475bb8981d9ab1ddf040
.exe windows x86

dc196ee5594599da8b39f7a4733c776c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExW
DeregisterEventSource
ReportEventA
RegisterEventSourceW
RegEnumValueA
GetUserNameA

comctl32

ord17

gdi32

DeleteDC
RestoreDC
DeleteObject
GetTextMetricsA
GetTextFaceA
SelectObject
CreateFontA
GetDeviceCaps
SetMapMode
SaveDC
Polyline
CreatePen
ExtTextOutW
GetTextExtentPoint32W
SetTextAlign
SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA

kernel32

MultiByteToWideChar
GetCommandLineA
ExitProcess
GetCommandLineW
MapViewOfFile
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
GetModuleHandleA
GetStartupInfoA
GetStartupInfoW
CloseHandle
CreateThread
Sleep
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
MulDiv
FreeLibrary
GetProcAddress
WideCharToMultiByte
GetModuleFileNameA
LoadLibraryA
GetSystemDefaultLangID
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
GetVersionExA
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
lstrcpyA
GetLastError
GetProfileStringA
SetEvent
CreateSemaphoreA
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
DeleteFileA
RemoveDirectoryA
RemoveDirectoryW
GetTickCount
SetEnvironmentVariableA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
GetFileAttributesA
CreateDirectoryA
FindNextFileA
FindClose
FindFirstFileA
GetWindowsDirectoryA
WriteFile
SetFilePointer
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LockResource
LoadResource
FindResourceExA
GetSystemDirectoryA
SetEndOfFile
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
IsDBCSLeadByte
CreateProcessA
CreateProcessW
SuspendThread
GetSystemTime
GetComputerNameA
CreateMutexA
TlsAlloc
TlsFree
TlsSetValue
VirtualFree
TlsGetValue
GetTempPathA
ResumeThread
GetCurrentThreadId
TerminateThread
GetCurrentProcessId
IsValidCodePage
HeapAlloc
VirtualAlloc
DuplicateHandle
lstrcmpW
GetStringTypeW
DebugBreak
GetThreadSelectorEntry
GetLocaleInfoA
LCMapStringW
GetThreadContext
HeapFree
SetLastError
GetSystemTimeAsFileTime
OutputDebugStringA
LCMapStringA
GetStringTypeA
RtlUnwind

oleaut32

SysFreeString
VariantTimeToDosDateTime
SysAllocString
SystemTimeToVariantTime
SysStringLen

shell32

ExtractIconExA
ShellExecuteExA

shlwapi

AssocQueryStringW
UrlGetPartA
wnsprintfA

urlmon

CreateURLMoniker

user32

GetScrollInfo
IsDlgButtonChecked
LoadIconA
DrawFocusRect
SetWindowTextW
GetWindow
LoadCursorA
DestroyIcon
GetWindowPlacement
IsIconic
LoadStringW
GetWindowThreadProcessId
EnumWindows
CharPrevA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
EnableWindow
DrawIconEx
DestroyWindow
SetWindowLongA
GetSysColor
SendDlgItemMessageA
GetClientRect
SetScrollInfo
SystemParametersInfoA
CheckDlgButton
SetDlgItemTextA
SetFocus
EndDialog
GetDlgItem
ShowWindow
SetCursor
InvalidateRect
DialogBoxParamW
DialogBoxParamA
CreateDialogParamW
CreateDialogParamA
SetWindowTextA
GetDC
MapWindowPoints
GetSysColorBrush
FillRect
ReleaseDC
GetSystemMetrics
SetForegroundWindow
GetWindowLongA
GetWindowRect
SetWindowPos
RegisterClassExA
CreateWindowExA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
SetTimer
SendMessageA
PostMessageA
DefWindowProcA

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA

wininet

InternetReadFileExA
InternetWriteFile
HttpSendRequestExA
InternetSetOptionA
HttpEndRequestA
InternetSetStatusCallback
InternetAutodial
InternetGetConnectedState
InternetCloseHandle
InternetQueryOptionA
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetOpenA

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc196ee5594599da8b39f7a4733c776c

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

oleaut32

shell32

shlwapi

urlmon

user32

version

wininet

Sections

.text Size: 164KB - Virtual size: 163KB

.data Size: 4KB - Virtual size: 32KB

.rsrc Size: 24KB - Virtual size: 36KB

.text
Size: 164KB - Virtual size: 163KB

.data
Size: 4KB - Virtual size: 32KB

.rsrc
Size: 24KB - Virtual size: 36KB