e3e0f283f69940992b6492116443b95346705fc0c6fd1f6ed93c467efedef0d6

Sharing

Copy URL Twitter E-mail

General

Target

e3e0f283f69940992b6492116443b95346705fc0c6fd1f6ed93c467efedef0d6
Size

414KB
MD5

7d23cf4400b61e6f21d45442d83ae504
SHA1

20c1bc85dff622af8aff68e1e519515d271de468
SHA256

e3e0f283f69940992b6492116443b95346705fc0c6fd1f6ed93c467efedef0d6
SHA512

fd5ed313451713c4c2a3073508e2df03168c56c7497608faa4c1652955fb26b665f947be48ae7171d5707fa67cc44d44dc2f68268c5d23dee6ffdcbed49fd447
SSDEEP

12288:gkH7JpugFFDiB/kUX0Eh/I55iePDQUOn/dQ:hWgFE7kEh/I5X7pq/+

Score

N/A

Malware Config

Signatures

Files

e3e0f283f69940992b6492116443b95346705fc0c6fd1f6ed93c467efedef0d6
.exe windows x86

e126a66fe95c5e74f4dbd3e8f4d02014

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WINNLSGetEnableStatus
DeleteMenu
LoadStringA
GetMessageW
InvalidateRect
IsDialogMessageA
EnumDisplaySettingsExW
OpenWindowStationA
GetGUIThreadInfo
GetDoubleClickTime
EnumWindowStationsW
CreateIconFromResource
CloseWindowStation
DefDlgProcW
SetPropW
ReleaseCapture
AdjustWindowRect
CallNextHookEx
IsCharUpperW
GetShellWindow
FindWindowExA
GetMenuItemRect
MessageBoxIndirectW

gdi32

GetTextExtentPointW
AngleArc
GetWindowOrgEx
FrameRgn
ExtCreatePen
FillPath

comdlg32

FindTextW
ChooseColorA
GetSaveFileNameA
PageSetupDlgW
ReplaceTextA
GetFileTitleA
PrintDlgA
GetSaveFileNameW
GetOpenFileNameA
FindTextA
ChooseFontW
LoadAlterBitmap
ChooseFontA
GetFileTitleW

advapi32

LookupAccountSidA
GetUserNameW
LookupAccountSidW
CryptReleaseContext
CryptEnumProvidersA
RegEnumKeyW
StartServiceW
LookupPrivilegeDisplayNameA

kernel32

EnterCriticalSection
QueryPerformanceCounter
SetLastError
WriteFile
GetDiskFreeSpaceA
HeapAlloc
TlsFree
EnumCalendarInfoExW
LoadLibraryA
GetTickCount
InterlockedExchange
RtlUnwind
GetACP
FreeEnvironmentStringsW
VirtualFreeEx
LCMapStringA
GetStringTypeA
HeapCreate
GetNumberFormatA
GetCurrentProcess
LCMapStringW
GetCurrentProcessId
GetThreadSelectorEntry
GetLastError
GetFileType
GetProcAddress
GetCommandLineA
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
GetOEMCP
GetEnvironmentStrings
IsBadWritePtr
VirtualAlloc
GetCPInfo
SetThreadIdealProcessor
GetCurrentThreadId
GetEnvironmentStringsW
HeapFree
TlsGetValue
WideCharToMultiByte
HeapReAlloc
GetStringTypeW
TerminateProcess
UnhandledExceptionFilter
GetStdHandle
SetConsoleCursorInfo
GetCurrentThread
CreateFileW
InitializeCriticalSection
MultiByteToWideChar
HeapDestroy
LeaveCriticalSection
VirtualFree
GetCurrentDirectoryW
GetModuleHandleA
lstrcat
TlsSetValue
GetFileAttributesA
DeleteCriticalSection
VirtualQuery
GetPrivateProfileSectionNamesW
TlsAlloc
GetSystemTimeAsFileTime
ExitProcess
FreeEnvironmentStringsA
GetVersion
GetWindowsDirectoryW
ExitThread
AddAtomA
WaitNamedPipeA

wininet

HttpOpenRequestA
ShowCertificate

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 303KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e126a66fe95c5e74f4dbd3e8f4d02014

Headers

File Characteristics

Imports

user32

gdi32

comdlg32

advapi32

kernel32

wininet

Sections

.text Size: 106KB - Virtual size: 106KB

.data Size: 303KB - Virtual size: 308KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 106KB - Virtual size: 106KB

.data
Size: 303KB - Virtual size: 308KB

.rsrc
Size: 3KB - Virtual size: 2KB