bbbafda5577b965a47f1f05fe7cd8b08affae5828e004917a3c7fd12b7154761

Sharing

Copy URL Twitter E-mail

General

Target

bbbafda5577b965a47f1f05fe7cd8b08affae5828e004917a3c7fd12b7154761
Size

552KB
MD5

d0aaa13b299f139aef271c8f4a3588c2
SHA1

f34872a7d2cca625e54924fae3a6e4dde73ca05f
SHA256

bbbafda5577b965a47f1f05fe7cd8b08affae5828e004917a3c7fd12b7154761
SHA512

6e116d6a5462b690e2e998eecf626429129a2c34e5157deca60d9fd2a79a90a96be7b232a11192ec60fbf1cb2f834a6476b5e93ef0b514d533c6fc195f916b02
SSDEEP

12288:3GEwP1Opgyas4XIAGY+GXHSdpXzc7/G8tA:3GExlY+GCdpXzc7+8t

Score

N/A

Malware Config

Signatures

Files

bbbafda5577b965a47f1f05fe7cd8b08affae5828e004917a3c7fd12b7154761
.exe windows x86

19e1162b4a5aa0fb4f716925671d2d81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateMDIWindowW
RegisterClassExA
MonitorFromPoint
DestroyWindow
GetWindowTextLengthA
DdeImpersonateClient
DdeCreateStringHandleW
GetPropA
MessageBoxW
GetMessagePos
SendDlgItemMessageA
RegisterClassA
SetWindowsHookA
DefWindowProcW
WINNLSGetIMEHotkey
LoadBitmapA
ActivateKeyboardLayout
SetDeskWallpaper
CreateWindowExA
MenuItemFromPoint
GetSysColor
ShowWindow

comdlg32

PageSetupDlgA
GetOpenFileNameA

kernel32

GetSystemTime
TransactNamedPipe
DeleteCriticalSection
DosDateTimeToFileTime
GetTimeZoneInformation
CreateEventW
CreateMailslotA
GetSystemTimeAsFileTime
CompareStringW
GetStdHandle
LoadLibraryA
CloseHandle
LeaveCriticalSection
InterlockedIncrement
UnhandledExceptionFilter
VirtualQuery
RtlMoveMemory
GlobalGetAtomNameW
TlsGetValue
VirtualAlloc
GetFileType
WideCharToMultiByte
FlushFileBuffers
GetTempPathA
InterlockedDecrement
LocalUnlock
GetCurrentThreadId
GetProcAddress
InitializeCriticalSection
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
GlobalFindAtomA
GetModuleHandleA
CompareStringA
OpenMutexA
HeapCreate
FormatMessageA
GetLastError
EnterCriticalSection
GetCurrentProcessId
InterlockedExchange
HeapAlloc
RtlUnwind
SetStdHandle
GetStringTypeA
GetCPInfo
GetCurrentThread
GetTickCount
TlsSetValue
TlsFree
WriteFile
IsBadWritePtr
GetCurrencyFormatW
FlushConsoleInputBuffer
GetVersion
QueryPerformanceCounter
TerminateProcess
VirtualFree
SetLastError
MultiByteToWideChar
LCMapStringA
ExitProcess
CreateMutexA
GetEnvironmentStringsW
HeapReAlloc
SetConsoleCtrlHandler
GetCurrentProcess
SetHandleCount
FreeEnvironmentStringsW
GetStartupInfoW
ReadConsoleInputW
GetModuleFileNameW
LCMapStringW
SetEnvironmentVariableA
ReadFile
HeapFree
SetFilePointer
GetModuleFileNameA
GetCommandLineW
TlsAlloc
GetStringTypeW
GetLocalTime
GetCommandLineA
GetStartupInfoA

comctl32

InitCommonControlsEx
DrawInsert
ImageList_DragMove
ImageList_GetImageRect
ImageList_Add
ImageList_GetFlags

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19e1162b4a5aa0fb4f716925671d2d81

Headers

File Characteristics

Imports

user32

comdlg32

kernel32

comctl32

Sections

.text Size: 339KB - Virtual size: 339KB

.rdata Size: 70KB - Virtual size: 83KB

.data Size: 115KB - Virtual size: 115KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 339KB - Virtual size: 339KB

.rdata
Size: 70KB - Virtual size: 83KB

.data
Size: 115KB - Virtual size: 115KB

.rsrc
Size: 26KB - Virtual size: 25KB