5e15ddb8517d18ceb5fa44983ccc6beff029ec7414f5f12fa52bfce45cba6139

Sharing

Copy URL Twitter E-mail

General

Target

5e15ddb8517d18ceb5fa44983ccc6beff029ec7414f5f12fa52bfce45cba6139
Size

304KB
MD5

1007bdb2a57f1649861362ed42a2445b
SHA1

5fd7d16552fe9bbfd862256f3acf9b096535056c
SHA256

5e15ddb8517d18ceb5fa44983ccc6beff029ec7414f5f12fa52bfce45cba6139
SHA512

8f14c3fe24d6db89a5983221db0444cd4a333f4104bc782e3d62ca0143cb357841f5b40261ec92b7407e83b89113139a9f7ef7e5400083d54019f8ed8ac0fff5
SSDEEP

6144:LIIEeZrRrke9QXbRp8oXFNlU7dHAY7WD:LS61DuTZUZHAY6D

Score

N/A

Malware Config

Signatures

Files

5e15ddb8517d18ceb5fa44983ccc6beff029ec7414f5f12fa52bfce45cba6139
.exe windows x86

55ea8a3857e35f1710975e2a8251e8c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetWindowsDirectoryA
GetEnvironmentVariableA
lstrlenA
Sleep
GetLastError
SetFilePointer
WriteFile
ReadFile
SetEndOfFile
GetFileSize
FindClose
FindNextFileA
FindFirstFileA
CreateFileW
FindFirstFileW
MultiByteToWideChar
DeleteFileW
SetFileAttributesW
SetThreadPriority
SetPriorityClass
GetCurrentThread
GetCurrentProcess
GetVersionExA
HeapFree
HeapAlloc
GetVersion
CreateThread
GetSystemDefaultLangID
LockResource
LoadResource
SizeofResource
FindResourceA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFullPathNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
InterlockedExchange
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
WideCharToMultiByte
LCMapStringA
SetStdHandle
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
WaitForSingleObject
TerminateThread
GetModuleHandleA
TerminateProcess
GetModuleFileNameA
SetCurrentDirectoryA
CreateFileA
GetDiskFreeSpaceA
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
OpenProcess
ReadProcessMemory
CloseHandle
WritePrivateProfileStringA
GetLogicalDriveStringsA
SetFileAttributesA
DeleteFileA
lstrcmpA
lstrcpyA
GetPrivateProfileStringA
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
GetACP
HeapSize
HeapReAlloc
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetFileType
GetStartupInfoA
GetCommandLineA

user32

CreateWindowExA
SetWindowPos
DestroyWindow
LoadBitmapA
GetSystemMenu
EnableMenuItem
EnableWindow
SendDlgItemMessageA
DialogBoxParamA
EndDialog
GetSysColorBrush
GetWindowLongA
LoadCursorA
SetCursor
KillTimer
GetCursorPos
ScreenToClient
PtInRect
SetTimer
InvalidateRect
CallWindowProcA
GetDlgCtrlID
WindowFromPoint
LoadIconA
GetDlgItem
SetWindowLongA
SetDlgItemTextA
SetFocus
MessageBoxA
wsprintfA
GetParent
SetWindowTextA
SendMessageA
GetClientRect

gdi32

GetCurrentObject
DeleteObject
SelectObject
SetTextColor
SetBkMode
GetStockObject
GetObjectA
CreateFontIndirectA
CreatePatternBrush

advapi32

RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA

shell32

ShellExecuteA

shlwapi

SHDeleteKeyA

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55ea8a3857e35f1710975e2a8251e8c2

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 23KB

.rsrc Size: 216KB - Virtual size: 216KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 23KB

.rsrc
Size: 216KB - Virtual size: 216KB