1448ff184d1bf8775146ca0ac76bb5effb8b677e0c1b08cd339bb8eafa8f90e0

Sharing

Copy URL Twitter E-mail

General

Target

1448ff184d1bf8775146ca0ac76bb5effb8b677e0c1b08cd339bb8eafa8f90e0
Size

642KB
MD5

3e2e9a874e111c960399add08ca8b000
SHA1

9d767551fcb165fa57d2b3d42483e507753a3437
SHA256

1448ff184d1bf8775146ca0ac76bb5effb8b677e0c1b08cd339bb8eafa8f90e0
SHA512

2cf797e7ae0685ad62362514a142b0f47b55a93a735343ca474e572eb090d0f8c36b7872f683c6a13db7999e13db3f4cb12d788a7e4fc368d25b790ec7dceed9
SSDEEP

12288:G/iOXpu4Wo/WfTcFXXZyGSMCgH5S3qXwnkjdX427fu:0pGKXgGSM9HA6BB42C

Score

N/A

Malware Config

Signatures

Files

1448ff184d1bf8775146ca0ac76bb5effb8b677e0c1b08cd339bb8eafa8f90e0
.exe windows x86

0e3648252d7d9574a7fdcbf626ccd4d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
ConnectNamedPipe
GlobalGetAtomNameW
VirtualQueryEx
FindFirstFileExW
ExitThread
GlobalDeleteAtom
MoveFileExA
CreateProcessA
GetEnvironmentStringsW
VirtualQuery
GetCurrentProcessId
IsBadReadPtr
DosDateTimeToFileTime
_llseek
UnmapViewOfFile
VirtualLock
GetPrivateProfileStringW
GetOEMCP
LeaveCriticalSection
GetPrivateProfileSectionW
EnumSystemCodePagesW
GetAtomNameA
FormatMessageW
SetEnvironmentVariableW
GetCompressedFileSizeW
CreateDirectoryW
SetEndOfFile
GetCommModemStatus
RaiseException
SetSystemTime
IsBadWritePtr
CompareStringW
GlobalFindAtomW
WritePrivateProfileStringW
FreeLibrary
DuplicateHandle
EnumDateFormatsW
VirtualAlloc
CloseHandle
GetFileType
SetThreadPriorityBoost
FindFirstFileW
GetShortPathNameA
OutputDebugStringW
GlobalReAlloc
PeekConsoleInputW
SetFileAttributesA
CreateFileW
EnumSystemCodePagesA
SetConsoleTitleA
GenerateConsoleCtrlEvent
CopyFileExW
GetFileAttributesExA
GetHandleInformation
GetTapeParameters
ReleaseMutex
GetBinaryTypeW
SetProcessAffinityMask
SetMailslotInfo
RemoveDirectoryW
SetCurrentDirectoryA
CreateDirectoryA
WriteProcessMemory
GetStartupInfoA
GetTickCount
SetThreadLocale
LocalReAlloc
CreateMutexW
DeleteFiber
GetProfileStringA
SetProcessWorkingSetSize
VirtualAllocEx
SetCommTimeouts
LocalLock
FindResourceExW
PulseEvent
ReadConsoleInputW
ExitProcess
GetTempPathW
OutputDebugStringA
WriteFile
GetLogicalDriveStringsA
SearchPathW

user32

PeekMessageW
FindWindowW
GetAncestor
OpenWindowStationW
AppendMenuW
InvalidateRect
DrawStateA
UnregisterClassW
GetClassLongW
DrawIconEx
GetQueueStatus
AppendMenuA
GetDesktopWindow
LoadBitmapW
PostMessageA

gdi32

GetTextMetricsW
CreateICA
PatBlt
GetTextFaceW

comdlg32

CommDlgExtendedError
GetSaveFileNameW

advapi32

CryptAcquireContextW
RegUnLoadKeyA
RegCreateKeyW
GetSidSubAuthority
GetFileSecurityA
GetCurrentHwProfileW
CryptImportKey
GetSidIdentifierAuthority
RegNotifyChangeKeyValue
RegLoadKeyA
EnumServicesStatusW
RegQueryInfoKeyA
CryptReleaseContext
GetSecurityInfo

shell32

Shell_NotifyIconW
SHGetDesktopFolder
SHGetSpecialFolderPathA
SHChangeNotify
SHAddToRecentDocs
ExtractIconExW
DragQueryPoint
Shell_NotifyIconA
FindExecutableW

oleaut32

SafeArrayPutElement
SysAllocStringLen
SafeArrayRedim
SysFreeString
SysStringLen
LoadTypeLi
LoadTypeLibEx
SafeArrayCreate
SetErrorInfo
SafeArrayGetLBound

comctl32

ImageList_LoadImageW
ImageList_GetBkColor
_TrackMouseEvent
CreatePropertySheetPageW

msvcrt

_wputenv
isprint
_wsplitpath
_mbsnbcnt
_ultow
_access
_wremove
wcstol
_errno
_locking
wcsspn
_mbsnicmp
_ismbblead
_chdir
_cwait
_fullpath
freopen
_wgetcwd
frexp
fopen
strerror
_mbsncmp
_strnicoll
wscanf
iswspace
_wcsnset
srand
_isctype
wcstoul
_close
_strupr
strrchr
fflush
_wcsupr
_strrev
_spawnv
_isatty
_get_osfhandle
ungetc
printf
iswalpha
setvbuf
_controlfp
_getcwd
_mbsnbcat
fgetws
atol
rename
iswalnum
toupper
gmtime
_mbsnbcpy
mktime
fwprintf
_wchdir
_ultoa
strstr
_ui64tow

Sections

.text
Size: 7KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e3648252d7d9574a7fdcbf626ccd4d3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

comctl32

msvcrt

Sections

.text Size: 7KB - Virtual size: 223KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 260KB - Virtual size: 259KB

.rsrc Size: 16KB - Virtual size: 16KB

.text
Size: 7KB - Virtual size: 223KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 260KB - Virtual size: 259KB

.rsrc
Size: 16KB - Virtual size: 16KB