10ea7f8ab2322063fc0d89dbb1f2e8a464a61d03872b4fb13868197603091ee9

Sharing

Copy URL Twitter E-mail

General

Target

10ea7f8ab2322063fc0d89dbb1f2e8a464a61d03872b4fb13868197603091ee9
Size

196KB
MD5

2f840447692202c5b764eb4bd2778350
SHA1

8a4eceb10cc85fe4943d4d45311796f9b8b5d493
SHA256

10ea7f8ab2322063fc0d89dbb1f2e8a464a61d03872b4fb13868197603091ee9
SHA512

b8d4116be1de67420d5689982fe31fb267fc0a526971ee154ce21671fd78356157df4dc4e9cb6f6b0debaba79f4ccb28cf3240baa5d60c73d45cf1e87804bb10
SSDEEP

6144:+k367Hqt2jycgL+rhHKKV2BsdZhgTj8N9Bf:NiHKp+lrmsbhgTj8Ff

Score

N/A

Malware Config

Signatures

Files

10ea7f8ab2322063fc0d89dbb1f2e8a464a61d03872b4fb13868197603091ee9
.exe windows x86

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextW
wsprintfW
LoadIconW
DialogBoxParamW
ReleaseDC
SendDlgItemMessageW
SetCursor
MessageBoxW
EndDialog
LoadStringW
SetWindowLongW
GetDlgItemTextA
RegisterClipboardFormatW
GetParent
LoadCursorW
PostMessageW
SetFocus
GetWindowLongW
InsertMenuItemW
SystemParametersInfoW
WinHelpW
LoadBitmapW
EnableWindow
GetDlgItem
LoadImageW
GetDC
SendMessageW
SetWindowTextW

kernel32

WideCharToMultiByte
DeleteCriticalSection
IsValidCodePage
lstrcmpiW
OutputDebugStringW
GetStartupInfoA
GlobalUnlock
GetComputerNameW
LocalReAlloc
GetCPInfo
LoadLibraryW
CloseHandle
DeleteFileA
LocalFree
CreateFileW
GetCurrentProcess
InterlockedDecrement
GetEnvironmentStringsA
lstrlenW
SetUnhandledExceptionFilter
GetProcAddress
InitializeCriticalSection
GlobalLock
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
GlobalAlloc
IsBadReadPtr
GetTickCount
FileTimeToSystemTime
FormatMessageW
lstrcpyW
GetDateFormatW
OutputDebugStringA
GetModuleHandleA
GetSystemWindowsDirectoryW
QueryPerformanceCounter
FileTimeToLocalFileTime
SetLastError
InterlockedIncrement
GetLastError
GlobalFree

certcli

CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeFlags
CACloseCA
CACreateCertType
CAGetCertTypeFlags
CAGetCAProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAFreeCAProperty
CACloseCertType
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAAddCACertificateType
CASetCertTypeExtension
CAEnumCertTypes
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA

msvcrt

_adjust_fdiv
_wcsicmp
_purecall
wcsstr
vswprintf
wcstoul
_initterm
malloc
??1type_info@@UAE@XZ
wcschr
memmove
wcscpy
wcslen
__dllonexit
?terminate@@YAXXZ
_wcsupr
_onexit
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscat
free
mbstowcs
_except_handler3
??2@YAPAXI@Z
wcscmp

shell32

ShellExecuteW
ShellExecuteExW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 78KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

Imports

user32

kernel32

certcli

msvcrt

shell32

advapi32

gdi32

comctl32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 45KB - Virtual size: 44KB

.hdata Size: 78KB - Virtual size: 3.2MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 45KB - Virtual size: 44KB

.hdata
Size: 78KB - Virtual size: 3.2MB

.rsrc
Size: 3KB - Virtual size: 2KB