6e360cf4fd9402246c4be00eec560e5a1d624cd400df58aea25b08f8ea8fad83

Sharing

Copy URL Twitter E-mail

General

Target

6e360cf4fd9402246c4be00eec560e5a1d624cd400df58aea25b08f8ea8fad83
Size

798KB
MD5

1be2003ec9b3eb641a525e3c681f5780
SHA1

42f47a8d672b6ecf248c20e8fa94f62682c203b8
SHA256

6e360cf4fd9402246c4be00eec560e5a1d624cd400df58aea25b08f8ea8fad83
SHA512

7959384d50cfc2fc612f5f47965c3432c50d1c2ac67edaeb82de7b7393567b9d2f4f7182451af6d2a1c210bd332f4d9ca06255240d2527c180c3a01ae32ef739
SSDEEP

12288:l7qPJIiVCIApUclPcxsdEWCDojaSSC3gVsn3ZG89SsJVCxn0x20UiR:l7qPuRIYlPceaSSvOJv9SsJVCxn0Q0t

Score

N/A

Malware Config

Signatures

Files

6e360cf4fd9402246c4be00eec560e5a1d624cd400df58aea25b08f8ea8fad83
.exe windows x86

0020e74d86f676ba00b93f2a7420a9ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

InvalidateRect
DdeFreeDataHandle
ReleaseDC
OemToCharA
BeginPaint
CharUpperA
CharToOemA
CharNextA
CharPrevA
DdeCreateStringHandleA
DdeInitializeA
DdeUninitialize
DdeFreeStringHandle
DdeDisconnect
DdeGetLastError
DdeClientTransaction
DdeConnect
GetClassInfoA
GetWindowLongA
GetWindow
GetClassNameA
CharLowerA
GetSysColor
FillRect
SetRect
SetRectEmpty
ScreenToClient
InflateRect
PostMessageA
GetWindowRect
EnableWindow
SetFocus
IsWindowVisible
DialogBoxParamA
GetWindowTextA
GetDlgItem
CreateDialogParamA
ExitWindowsEx
FindWindowA
RegisterWindowMessageA
SendMessageA
GetClientRect
SetWindowTextA
SetDlgItemTextA
LoadBitmapA
GetSystemMetrics
SetWindowPos
UpdateWindow
ShowWindow
DestroyWindow
LoadStringA
wsprintfA
MessageBeep
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
SetTimer
PeekMessageA
IsWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
KillTimer
EndDialog
SendDlgItemMessageA
DdeGetData
GetDC
EndPaint

gdi32

CreateBitmap
CreateDIBitmap
GetTextExtentPointA
SetPixel
SetBkColor
CreatePen
DeleteObject
GetObjectA
RealizePalette
SelectPalette
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetDeviceCaps
RestoreDC
Rectangle
GetSystemPaletteEntries
CreateSolidBrush
SaveDC
GetStockObject
LineTo
MoveToEx
CreateCompatibleBitmap
CreatePalette
CreateFontIndirectA

kernel32

GetVersion
_hwrite
OpenFile
lstrcatA
GlobalLock
LoadLibraryA
GlobalFree
FreeResource
SizeofResource
LoadResource
FindResourceA
GetSystemInfo
SetErrorMode
GetModuleHandleA
IsDBCSLeadByte
GetProcAddress
FreeLibrary
GetModuleFileNameA
lstrcpyA
GetWindowsDirectoryA
GlobalAlloc
GetTickCount
LockResource
GlobalUnlock
_lclose
SetCurrentDirectoryA
GetCurrentThread
SetFileAttributesA
WinExec
ReadFile
GetSystemDirectoryA
_lread
_lwrite
_llseek
GetCurrentDirectoryA
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapFree
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetStartupInfoA
MoveFileA
SetFilePointer
SetEndOfFile
GetProfileSectionA
GlobalReAlloc
GlobalCompact
GlobalHandle
lstrcmpiA
lstrlenA
lstrcmpA
MulDiv
GetSystemDefaultLCID
Sleep
RemoveDirectoryA
GetFileAttributesA
WriteProfileSectionA
FindNextFileA
FindClose
FindFirstFileA
GetDriveTypeA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetDiskFreeSpaceA
CreateDirectoryA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetLocalTime
lstrcpynA
GetPrivateProfileStringA
GetCurrentProcess
MoveFileExA
GetPrivateProfileSectionA
GetFileSize
GetLastError
WritePrivateProfileSectionA
WriteProfileStringA
WritePrivateProfileStringA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

advapi32

RegSetValueExA
RegConnectRegistryA
OpenSCManagerA
CloseServiceHandle
OpenThreadToken
GetTokenInformation
EqualSid
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
AdjustTokenPrivileges
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
InitializeSecurityDescriptor
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RegCreateKeyExA
FreeSid
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 500KB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0020e74d86f676ba00b93f2a7420a9ca

Headers

File Characteristics

Imports

user32

gdi32

kernel32

version

advapi32

comdlg32

shell32

Sections

.text Size: 123KB - Virtual size: 123KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 14KB - Virtual size: 18KB

.rsrc Size: 152KB - Virtual size: 151KB

.vmp0 Size: 500KB - Virtual size: 1.6MB

.text
Size: 123KB - Virtual size: 123KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 14KB - Virtual size: 18KB

.rsrc
Size: 152KB - Virtual size: 151KB

.vmp0
Size: 500KB - Virtual size: 1.6MB