22080e2712b439f8d4753a0ef661fbd26b820a3aa5bdd3f52e9d2871f8bced4d

Sharing

Copy URL Twitter E-mail

General

Target

22080e2712b439f8d4753a0ef661fbd26b820a3aa5bdd3f52e9d2871f8bced4d
Size

404KB
MD5

003319e9b13c3864ca28b6aa8bfaef10
SHA1

8be6764fcc642e41d5d26c91797b85c498deedd7
SHA256

22080e2712b439f8d4753a0ef661fbd26b820a3aa5bdd3f52e9d2871f8bced4d
SHA512

6a796be2a813ed325018421f5453283fc3dd24c9041dba481258c5a44c29926cc70bd1bdc312bbafe70d822c5b2a6f66510385ae400b4c8252da54668dd50d63
SSDEEP

6144:UJeT5I90djLQq/tz41myG5AM/Dhr1Xg+TkISADnNWe0LjTDc51Yj8fZ7Y4q:UJeT5ScjLJ4MAMbhr1mIfeLABYR

Score

N/A

Malware Config

Signatures

Files

22080e2712b439f8d4753a0ef661fbd26b820a3aa5bdd3f52e9d2871f8bced4d
.exe windows x86

999835bc5cfee2f6fa0373dd718b4b9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowOwnedPopups
EndDialog
AdjustWindowRectEx
GetDlgCtrlID
ShowWindow
DeferWindowPos
SetParent
GetWindow
DialogBoxParamA
DefDlgProcA
IsWindow
LoadIconA

advapi32

RegEnumValueA
RegOpenKeyA
RegConnectRegistryA
ReadEventLogA
OpenBackupEventLogA
RegOpenKeyExA
RegFlushKey
RegOverridePredefKey
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges
RegLoadKeyA

kernel32

ResetEvent
GetCPInfoExA
GetSystemDefaultLCID
GetCPInfo
InitializeCriticalSection
GetOEMCP
SetThreadLocale
GetStringTypeW
HeapFree
IsValidCodePage
CreateSemaphoreA
GetACP
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetModuleHandleA
GetProcAddress
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCommandLineA
TlsSetValue
GetCurrentThreadId
SetHandleInformation
VirtualAlloc
TlsGetValue
GetCurrentProcess
GetCurrentProcessId
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetProcessHeap

usp10

ScriptTextOut
ScriptCacheGetHeight
ScriptStringXtoCP
ScriptXtoCP
ScriptApplyLogicalWidth
ScriptJustify
ScriptCPtoX
ScriptGetLogicalWidths
ScriptItemize
ScriptLayout
ScriptString_pcOutChars
ScriptStringFree
ScriptBreak
ScriptGetProperties
ScriptString_pSize
ScriptPlace

msimg32

GradientFill
TransparentBlt
AlphaBlend

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

999835bc5cfee2f6fa0373dd718b4b9c

Headers

File Characteristics

Imports

user32

advapi32

kernel32

usp10

msimg32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 528KB

.rsrc Size: 386KB - Virtual size: 386KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 528KB

.rsrc
Size: 386KB - Virtual size: 386KB

.reloc
Size: 3KB - Virtual size: 3KB