6e6a166565d2a80402408d7ec98e7ad214516dcfe8029801897878f5f901b436

Sharing

Copy URL Twitter E-mail

General

Target

6e6a166565d2a80402408d7ec98e7ad214516dcfe8029801897878f5f901b436
Size

331KB
MD5

1ab91234a25658ad0c719d60dadfcce0
SHA1

fe5fe794373c7520a07124030a1c9e239296d459
SHA256

6e6a166565d2a80402408d7ec98e7ad214516dcfe8029801897878f5f901b436
SHA512

e79626ed65ff7c4a49cd245d2187fa22ea9a0968a064420f8843283d02565d8201a24e139e01e8f5f210cb6878f0d2f1f71562e9d53041607eb58180fd235ebe
SSDEEP

6144:7FFCNr0RYZWUXtjb8ev69OKGbNLQNdQFqjgntuo1RXy/8rPPNvemJ0f3X7rt:7LS0RYZWUh+9O9bNMvQgktuakOFvemJE

Score

N/A

Malware Config

Signatures

Files

6e6a166565d2a80402408d7ec98e7ad214516dcfe8029801897878f5f901b436
.exe windows x86

df718d8c09b625e28734fb8681280713

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHGetDesktopFolder
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW

ole32

OleUninitialize
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoInitialize
CoCreateInstance

shlwapi

PathIsRootW
StrCatW
StrCmpW
PathIsDirectoryW
SHGetValueW
StrChrIW

user32

EnableWindow
SetCursor
RedrawWindow
GetClientRect
SetWindowLongA
GetWindowLongW
InvalidateRect
LoadCursorW
DialogBoxParamW
SendDlgItemMessageW
ScreenToClient
ReleaseDC
LoadIconW
LoadImageW
SendMessageA
ShowWindow
FindWindowW
SetWindowPos
MessageBoxA
GetDlgItem
CreateWindowExW
GetWindowRect
SystemParametersInfoW
EnumThreadWindows
DefWindowProcW
MessageBoxW
wsprintfW
SendMessageW
SetForegroundWindow
SetTimer
PostMessageW
GetParent
LoadStringA
ExitWindowsEx
EnumChildWindows
SetWindowLongW

msvcrt

__setusermatherr
_controlfp
strtoul
??3@YAXPAX@Z
_ftol
_initterm
wcsncpy
__set_app_type
exit
__p__commode
__lconv_init
wcsncmp
_c_exit
_acmdln
_mbsinc
_except_handler3
_adjust_fdiv
_exit
__getmainargs
__p__fmode
wcscat
wcslen

advapi32

AdjustTokenPrivileges
RegOpenKeyW
RegOpenKeyExW
LookupAccountSidW
LookupPrivilegeValueW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
GetTokenInformation
AllocateAndInitializeSid
FreeSid

setupapi

SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupGetStringFieldW
SetupGetLineCountW

kernel32

HeapUnlock
DeleteFileW
SetCurrentDirectoryW
VirtualAlloc
GetVersionExW
GetCommState
CreateProcessW
LocalFree
CreateFileA
HeapLock
FileTimeToLocalFileTime
GetTempPathA
WriteFile
GetCurrentDirectoryW
CloseHandle
SetCommTimeouts
GetFileAttributesW
CreateThread
CloseHandle
GetCurrentThreadId
LoadLibraryExW
GetCurrentProcessId
ExitThread
ExitProcess
WideCharToMultiByte
FindClose
GetDriveTypeW
CreateDirectoryW
TerminateProcess
ReadFile
lstrcatW
FindFirstFileA
HeapAlloc
InitializeCriticalSection
FormatMessageW
GetVersion
SetErrorMode
VirtualFree
QueryPerformanceCounter
GetFileAttributesA
GetTempFileNameA
SetUnhandledExceptionFilter
CreateMutexW
lstrcpyW
DeleteCriticalSection
lstrlenW
GetProcAddress
GetModuleFileNameW
HeapFree
LeaveCriticalSection
OpenProcess
DeviceIoControl
CreateFileW
GetModuleHandleW
FindNextFileW
SetFilePointer
SetFileAttributesW
WaitForMultipleObjects
GetEnvironmentVariableW
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
HeapCreate
GetCurrentProcess
DeleteFileA
MultiByteToWideChar
CreateEventW
LoadLibraryW
HeapQueryInformation
CreateDirectoryA

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df718d8c09b625e28734fb8681280713

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

shlwapi

user32

msvcrt

advapi32

setupapi

kernel32

Sections

.text Size: 232KB - Virtual size: 232KB

.data Size: 55KB - Virtual size: 55KB

.rsrc Size: 78KB - Virtual size: 724KB

.text
Size: 232KB - Virtual size: 232KB

.data
Size: 55KB - Virtual size: 55KB

.rsrc
Size: 78KB - Virtual size: 724KB