8b2273360203bf16a005c4f33661eb3e05ca154b831878c00826bffaa7da61c9

Sharing

Copy URL

Twitter E-mail

General

Target

8b2273360203bf16a005c4f33661eb3e05ca154b831878c00826bffaa7da61c9
Size

178KB
MD5

eb415748b7b85e2f75975363d43ec179
SHA1

ccaa98511b865b25588d5cd6d3adb49fdc9a57b2
SHA256

8b2273360203bf16a005c4f33661eb3e05ca154b831878c00826bffaa7da61c9
SHA512

2ffc8a93a4232c41dbdb0216b39bdcd9e140696bdeb14f6fee9604a73e534b4ca9a57a7436022d89c2bef47ec027faeb392edae30bd1501ee41bde7d4adc796e
SSDEEP

3072:IlMIZH+0Ro2LF3tjdz1SdMAxAW7PDrTebv/WC1E/QPCNAJ95RyptzB749Qt81:k5zRoMhBTevMvW/Q6NK95Ryh71

Score

N/A

Malware Config

Signatures

Files

8b2273360203bf16a005c4f33661eb3e05ca154b831878c00826bffaa7da61c9
.exe windows x86

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

QueryWorkingSet

user32

DialogBoxParamW
BringWindowToTop
EnableScrollBar
LoadStringW
AttachThreadInput
AdjustWindowRectEx
PtInRect
HiliteMenuItem
GetMenuState
RemovePropW
CharNextA
InsertMenuItemW
InvalidateRgn
DrawTextA
InSendMessage
GetWindowRect
GrayStringW
RegisterWindowMessageW
DefWindowProcW
GetWindowTextW
CreateMenu
GetClassLongA
GetScrollInfo
SetCursorPos
RemoveMenu
FindWindowW
SetClassLongW
CallWindowProcA
GetWindowLongW
SetWindowTextW
SetRect
GetFocus
GetKeyboardLayout
GetWindowDC
CreateCaret
ChildWindowFromPointEx
UpdateWindow
InSendMessageEx
EnumChildWindows
DragObject
IsWindowEnabled
DefWindowProcA
LoadCursorA
GetForegroundWindow
SetLastErrorEx
MessageBoxExW
CharNextW
DialogBoxIndirectParamA
LookupIconIdFromDirectory
mouse_event
DeleteMenu
GetSysColor
DefFrameProcA
TrackPopupMenu
MessageBoxW
TabbedTextOutW
wvsprintfA
MonitorFromRect
DialogBoxParamA
OpenIcon
ShowScrollBar
RegisterClassW
GetUpdateRgn
ShowCursor
wsprintfW
GetKeyState
ShowWindow
GetMenuCheckMarkDimensions
GetScrollPos
InvertRect
EndPaint
GetClipCursor
CreateWindowExA
SetMenuItemBitmaps
GetShellWindow
DispatchMessageW
GetUpdateRect
LoadIconA
DestroyAcceleratorTable
GetClassLongW
DestroyCursor
IsChild
BeginDeferWindowPos
DrawIcon
GetKeyboardLayoutNameW
DrawTextExW
GetDlgItemInt
CheckRadioButton
CharPrevW
InsertMenuW
CascadeWindows
DrawTextW
SetWindowRgn
GetTopWindow
AdjustWindowRect
SetDlgItemTextA
LoadBitmapW
DefDlgProcA
ModifyMenuW
GetClassInfoExW
GetMessageExtraInfo
InternalGetWindowText
SetRectEmpty
RegisterWindowMessageA
GetSubMenu
CharUpperW

kernel32

GetDateFormatA
GetVersion
RegisterWaitForSingleObject
GetNumberFormatA
FindNextFileW
FileTimeToDosDateTime
FindResourceExW
GetStringTypeExW
SetThreadAffinityMask
GetBinaryTypeA
GetPriorityClass
VirtualFree
GetThreadLocale
GetTempPathA
AreFileApisANSI
GetProcAddress
DisconnectNamedPipe
VirtualAlloc
CloseHandle
FileTimeToLocalFileTime
CreateEventA
SetCommBreak
GetTickCount
GetComputerNameW
GetShortPathNameW
GetSystemDirectoryA
GetUserDefaultLCID
GlobalHandle
GetCompressedFileSizeW
TransactNamedPipe
LocalFree
GlobalFlags
SleepEx
GetFileType
VerifyVersionInfoW
GetModuleHandleW
IsBadReadPtr
EnterCriticalSection
CreateMutexA
VirtualProtect
SystemTimeToFileTime
CreateFileW
GetStartupInfoA
WaitForMultipleObjects
GlobalDeleteAtom
EnumResourceNamesA
CreateFileA
GetSystemDefaultLangID
GetThreadTimes
GetUserDefaultUILanguage
EscapeCommFunction
SetSystemTime
SetFileApisToOEM
LockResource
lstrlenA
GetFileAttributesW
GetCurrentThreadId
CopyFileW
LoadLibraryExW
SetCommTimeouts
lstrcatA
LoadResource
HeapValidate
GetThreadContext
SetWaitableTimer
DuplicateHandle
SetFileAttributesA
WaitForSingleObjectEx
GetCommModemStatus
CreateWaitableTimerW
SetHandleInformation
CreateFileMappingA
LocalUnlock
lstrcpynW
GetLastError
WaitForMultipleObjectsEx
UnmapViewOfFile
GetCommState
FindClose
FoldStringW
FormatMessageW
DeviceIoControl
GetLocalTime
WideCharToMultiByte
GetHandleInformation
MoveFileA
IsBadWritePtr
LoadLibraryExA
FindFirstChangeNotificationW
ReleaseMutex
LockFile
CancelIo
FindFirstFileW
IsDBCSLeadByte
AddAtomA
CreateDirectoryA
FileTimeToSystemTime
GlobalFree
lstrcatW
LocalReAlloc
GetTimeFormatW
SetFilePointer
GlobalMemoryStatusEx
LCMapStringW
SizeofResource
LeaveCriticalSection

rtutils

TracePrintfW

Exports

Exports

DeleteMemoryOld
FormatConfigExW
IsNotKeyNameW
GlobalPointerW
CallProject
InstallSizeEx
FormatAppNameNew
GeneratePointerW
DecrementCharW
IsValidProfileOld
IsNotPointEx
InstallDirectory
CloseFileNew
ProjectOld
LoadProjectW
ValidateFolderPathW
FindHeaderW
PutConfigA
FormatMutantEx
RemoveFullNameExA
ShowDate
EnumPenW
EnumTaskA
CallModuleExA
CallDateTimeA
IsValidObjectExW
GlobalAppNameOriginal
CallWidthW
ValidateMonitorA
CallPenW
IncrementProcessExA
CloseAnchorExW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.On59
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

File Characteristics

Imports

psapi

user32

kernel32

rtutils

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.Reel Size: 2KB - Virtual size: 5KB

.On59 Size: 5KB - Virtual size: 4KB

.Re82 Size: 23KB - Virtual size: 23KB

.Lax503 Size: 512B - Virtual size: 296B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.Reel
Size: 2KB - Virtual size: 5KB

.On59
Size: 5KB - Virtual size: 4KB

.Re82
Size: 23KB - Virtual size: 23KB

.Lax503
Size: 512B - Virtual size: 296B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB