848701d47839bd61472f45e239c1c34f0705f676a1b1ab9c04253384cc2994e5

Sharing

Copy URL Twitter E-mail

General

Target

848701d47839bd61472f45e239c1c34f0705f676a1b1ab9c04253384cc2994e5
Size

257KB
MD5

4027cf0daf084e5e7e398fdf3231f9cd
SHA1

8829187cdbee379d5ebf3a42fd80374449d12c15
SHA256

848701d47839bd61472f45e239c1c34f0705f676a1b1ab9c04253384cc2994e5
SHA512

e84cbbdb64d767494077891f420d6aa02317c68ee0f8ae9b2d2f74e226c44cb385d1dc1ecc68b250aba3244f032eb2443a880690b7c9b89b76709f5737145840
SSDEEP

6144:j6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:j6u6fDdnpRJopjmPFRDFrsoe

Score

N/A

Malware Config

Signatures

Files

848701d47839bd61472f45e239c1c34f0705f676a1b1ab9c04253384cc2994e5
.exe windows x86

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
BeginUpdateResourceW
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
LoadMenuIndirectA
CharLowerW
mouse_event
GetMenuInfo
CharPrevW
GetClassInfoW
SetDlgItemInt
GetMenuItemRect
MessageBoxIndirectA
SetDlgItemTextA
DialogBoxIndirectParamA
WinHelpW
GetKeyboardType
IsChild
SetMenu
GetSysColor
CopyIcon
GetDlgItemInt
CreateDialogIndirectParamW
keybd_event
PeekMessageA
GetCapture
RegisterWindowMessageW

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateMetaFileW
GetEnhMetaFileA
SetWinMetaFileBits
AddFontResourceA
GdiGetBatchLimit
UpdateICMRegKeyA
RemoveFontResourceA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

AVIStreamWriteData
AVIFileOpenW
AVIStreamEndStreaming
AVIFileAddRef
AVIFileEndRecord
AVIBuildFilter
AVISaveW
EditStreamSetInfoA
AVIStreamOpenFromFile
AVIClearClipboard
EditStreamCopy
AVIStreamFindSample

Sections

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icode
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unIsec
Size: 112KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

.edata Size: 5KB - Virtual size: 5KB

.icode Size: 14KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 16KB

.l Size: 107KB - Virtual size: 149KB

.data Size: 7KB - Virtual size: 331KB

.unIsec Size: 112KB - Virtual size: 166KB

.rsrc Size: 7KB - Virtual size: 6KB

.edata
Size: 5KB - Virtual size: 5KB

.icode
Size: 14KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 16KB

.l
Size: 107KB - Virtual size: 149KB

.data
Size: 7KB - Virtual size: 331KB

.unIsec
Size: 112KB - Virtual size: 166KB

.rsrc
Size: 7KB - Virtual size: 6KB