6ca7007030dbb9b6e0e972e55e8ebdfd99a408407ae4ffe589d9303cdb8a23f6

Sharing

Copy URL Twitter E-mail

General

Target

6ca7007030dbb9b6e0e972e55e8ebdfd99a408407ae4ffe589d9303cdb8a23f6
Size

179KB
MD5

29ee275fec9411fed4d7aa1385ae49cf
SHA1

8b8c9f1108e03f28505066a68dd8363834e54149
SHA256

6ca7007030dbb9b6e0e972e55e8ebdfd99a408407ae4ffe589d9303cdb8a23f6
SHA512

d1207a0af20d6bb57b7807efec286851547ad562f08500da81cf682a3a386f2bc01446b83fad232165ef5f1a8ac58fbe0abff7e144218ceb7723237821604d79
SSDEEP

3072:gB+PZElektfvsG71lFl+jW+3Q+ebFAEYyqrWnV9/8ptzX749Qt8:HErNv9717wj3obFAbrWnV9/8371

Score

N/A

Malware Config

Signatures

Files

6ca7007030dbb9b6e0e972e55e8ebdfd99a408407ae4ffe589d9303cdb8a23f6
.exe windows x86

fd1f057b0704a70bc80854b908024383

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

QueryWorkingSet

user32

DialogBoxParamW
BringWindowToTop
EnableScrollBar
LoadStringW
AttachThreadInput
AdjustWindowRectEx
PtInRect
HiliteMenuItem
GetMenuState
RemovePropW
CharNextA
InsertMenuItemW
InvalidateRgn
DrawTextA
InSendMessage
GetWindowRect
GrayStringW
RegisterWindowMessageW
DefWindowProcW
GetWindowTextW
CreateMenu
GetClassLongA
GetScrollInfo
SetCursorPos
RemoveMenu
FindWindowA
SetClassLongW
CallWindowProcA
GetWindowLongW
SetWindowTextW
SetRect
GetFocus
GetKeyboardLayout
GetWindowDC
CreateCaret
ChildWindowFromPointEx
UpdateWindow
InSendMessageEx
EnumChildWindows
DragObject
IsWindowEnabled
DefWindowProcA
LoadCursorA
GetForegroundWindow
SetLastErrorEx
MessageBoxExW
CharNextW
DialogBoxIndirectParamA
LookupIconIdFromDirectory
mouse_event
DeleteMenu
GetSysColor
DefFrameProcA
TrackPopupMenu
MessageBoxW
TabbedTextOutW
wvsprintfA
MonitorFromRect
DialogBoxParamA
OpenIcon
ShowScrollBar
RegisterClassW
GetUpdateRgn
ShowCursor
wsprintfW
GetKeyState
ShowWindow
GetMenuCheckMarkDimensions
GetScrollPos
InvertRect
EndPaint
GetClipCursor
CreateWindowExA
SetMenuItemBitmaps
GetShellWindow
DispatchMessageW
GetUpdateRect
LoadIconA
DestroyAcceleratorTable
GetClassLongW
DestroyCursor
IsChild
BeginDeferWindowPos
DrawIcon
GetKeyboardLayoutNameW
DrawTextExW
GetDlgItemInt
CheckRadioButton
CharPrevW
InsertMenuW
CascadeWindows
DrawTextW
SetWindowRgn
GetTopWindow
AdjustWindowRect
SetDlgItemTextA
LoadBitmapW
DefDlgProcA
ModifyMenuW
GetClassInfoExW
GetMessageExtraInfo
InternalGetWindowText
SetRectEmpty
RegisterWindowMessageA
GetSubMenu
CharUpperW

kernel32

GetDateFormatA
GetVersion
RegisterWaitForSingleObject
GetNumberFormatA
FindNextFileW
FileTimeToDosDateTime
FindResourceExW
GetStringTypeExW
SetThreadAffinityMask
GetBinaryTypeA
GetPriorityClass
VirtualFree
GetThreadLocale
GetTempPathA
AreFileApisANSI
GetProcAddress
DisconnectNamedPipe
VirtualAlloc
CloseHandle
FileTimeToLocalFileTime
CreateEventA
SetCommBreak
GetTickCount
GetComputerNameW
GetShortPathNameW
GetSystemDirectoryA
GetUserDefaultLCID
GlobalHandle
GetCompressedFileSizeW
TransactNamedPipe
LocalFree
GlobalFlags
SleepEx
GetFileType
VerifyVersionInfoW
GetModuleHandleW
IsBadReadPtr
EnterCriticalSection
CreateMutexA
VirtualProtect
SystemTimeToFileTime
CreateFileW
GetStartupInfoA
WaitForMultipleObjects
GlobalDeleteAtom
EnumResourceNamesA
CreateFileA
GetSystemDefaultLangID
GetThreadTimes
GetUserDefaultUILanguage
EscapeCommFunction
SetSystemTime
SetFileApisToOEM
LockResource
lstrlenA
GetFileAttributesW
GetCurrentThreadId
CopyFileW
LoadLibraryExW
SetCommTimeouts
lstrcatA
LoadResource
HeapValidate
GetThreadContext
SetWaitableTimer
DuplicateHandle
SetFileAttributesA
WaitForSingleObjectEx
GetCommModemStatus
CreateWaitableTimerW
SetHandleInformation
CreateFileMappingA
LocalUnlock
lstrcpynW
GetLastError
WaitForMultipleObjectsEx
UnmapViewOfFile
GetCommState
FindClose
FoldStringA
FormatMessageW
DeviceIoControl
GetLocalTime
WideCharToMultiByte
GetHandleInformation
MoveFileA
IsBadWritePtr
LoadLibraryExA
FindFirstChangeNotificationW
ReleaseMutex
LockFile
CancelIo
FindFirstFileW
IsDBCSLeadByte
AddAtomA
CreateDirectoryA
FileTimeToSystemTime
GlobalFree
lstrcatW
LocalReAlloc
GetTimeFormatW
SetFilePointer
GlobalMemoryStatusEx
LCMapStringW
SizeofResource
LeaveCriticalSection

rtutils

TracePrintfW

Exports

Exports

DeleteMemoryOld
FormatConfigExW
IsNotKeyNameW
GlobalPointerW
CallProject
InstallSizeEx
FormatAppNameNew
GeneratePointerW
DecrementCharW
IsValidProfileOld
IsNotPointEx
InstallDirectory
CloseFileNew
ProjectOld
LoadProjectW
ValidateFolderPathW
FindHeaderW
PutConfigA
FormatMutantEx
RemoveFullNameExA
ShowDate
EnumPenW
EnumTaskA
CallModuleExA
CallDateTimeA
IsValidObjectExW
GlobalAppNameOriginal
CallWidthW
ValidateMonitorA
CallPenW
IncrementProcessExA
CloseAnchorExW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Hap426
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Racy
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Alp
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Lax503
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd1f057b0704a70bc80854b908024383

Headers

DLL Characteristics

File Characteristics

Imports

psapi

user32

kernel32

rtutils

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.Reel Size: 6KB - Virtual size: 10KB

.Re82 Size: 23KB - Virtual size: 22KB

.Sty Size: 512B - Virtual size: 128B

.Hap426 Size: 512B - Virtual size: 128B

.Racy Size: 512B - Virtual size: 128B

.Alp Size: 512B - Virtual size: 128B

.Lax503 Size: 512B - Virtual size: 296B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.Reel
Size: 6KB - Virtual size: 10KB

.Re82
Size: 23KB - Virtual size: 22KB

.Sty
Size: 512B - Virtual size: 128B

.Hap426
Size: 512B - Virtual size: 128B

.Racy
Size: 512B - Virtual size: 128B

.Alp
Size: 512B - Virtual size: 128B

.Lax503
Size: 512B - Virtual size: 296B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB