9598457da283ede9902f2bac512844b9bac3d808d10f49eb09d56ef95b07b045

Sharing

Copy URL

Twitter E-mail

General

Target

9598457da283ede9902f2bac512844b9bac3d808d10f49eb09d56ef95b07b045
Size

179KB
MD5

d2c7e940479d9e8a9dcfcd01b2064afc
SHA1

1e05000542932330b4e0c2be1327be08041e1818
SHA256

9598457da283ede9902f2bac512844b9bac3d808d10f49eb09d56ef95b07b045
SHA512

3628787a62076bfaae58798abc50ffb18793f2b7b826b511dec0296ffbe442d850cdf8a53c64fec26565c56a31a6326dd54e44f4fb4da6aa4687052b0ba6e1a0
SSDEEP

3072:hGr4KYFhVuAPwKSFyFUr9Zz4dyeaTjtQb1w2p4/phVCiWYxfE+SoSAH9uqKWPZ:0ru74APB3FSZZjmh4R7CiWqHSo1dj

Score

N/A

Malware Config

Signatures

Files

9598457da283ede9902f2bac512844b9bac3d808d10f49eb09d56ef95b07b045
.exe windows x86

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeA

comctl32

ImageList_GetIcon

user32

OpenDesktopW
AllowSetForegroundWindow
SetCaretPos
LoadStringA
GetActiveWindow
GetKeyboardType
wvsprintfA
DialogBoxParamA
LoadIconA
DialogBoxIndirectParamW
GetForegroundWindow
GetClassInfoA
AttachThreadInput
SetWindowTextA
IsCharUpperA
GetWindowTextA
InsertMenuItemW
GetScrollPos
GetWindowPlacement
DestroyWindow
GetClipCursor
CharPrevW
ClientToScreen
FillRect
HiliteMenuItem
CreateDialogParamW
CreateAcceleratorTableW
InvalidateRect
LoadMenuA
SetDlgItemTextW
CharUpperA
GetIconInfo
WaitMessage
GetTopWindow
DefDlgProcW
OpenIcon
GetMessageW
ModifyMenuW
ArrangeIconicWindows
DragObject
SetTimer
CreateMenu
GetKeyboardLayout
CreateIconFromResource
LoadAcceleratorsW
CreateCaret
WindowFromPoint
SendMessageTimeoutW
MapDialogRect
GetDlgItemTextW
GetWindowLongW
SetDlgItemInt

gdi32

CreateBrushIndirect
GetLayout
SelectPalette
GetPaletteEntries
GetROP2
CreateDiscardableBitmap
SetBkMode
GetBitmapBits
SetMapMode
GetTextColor
GetWindowOrgEx
OffsetViewportOrgEx
TextOutA
CreateBitmap
CreatePalette
CreatePolygonRgn
ExtTextOutW
PolyBezier
GetMapMode
SelectObject
SetStretchBltMode
SetRectRgn
GetViewportOrgEx

kernel32

GetPriorityClass
FindFirstChangeNotificationW
GetLongPathNameW
GlobalHandle
AddAtomW
FlushFileBuffers
SetEvent
CancelIo
WaitForMultipleObjectsEx
HeapSize
VerifyVersionInfoW
FlushViewOfFile
lstrcmpW
GetACP
EscapeCommFunction
GetModuleFileNameA
SetThreadLocale
ResumeThread
FindFirstFileA
ConvertDefaultLocale
IsBadReadPtr
FindCloseChangeNotification
LoadResource
MoveFileExA
VerSetConditionMask
SetFileApisToOEM
SetFileTime
lstrcmpiA
EnumSystemLocalesA
FindResourceExA
GetWindowsDirectoryW
GetTickCount
FindNextFileW
GetFileAttributesExW
CreateSemaphoreA
GetVersionExA
GlobalAddAtomA
FoldStringW
IsBadStringPtrW
MoveFileA
GetStartupInfoA
GetOverlappedResult
SetSystemTimeAdjustment
EnumResourceNamesA
GlobalMemoryStatus
RaiseException
RemoveDirectoryW
ConnectNamedPipe

Exports

Exports

IsValidScreenA
OnHeaderNew
RtlFullNameNew
InsertValueW
RtlAnchor
FullNameExA
SendScreenEx
CloseMutantW
OnMonitor
AppNameOld
FormatCharOld
RtlFunctionEx
GenerateDataOld
FindDataA
PutMediaType
KillRectOld
ValidateVersion
CancelFolderPathOriginal
LoadClassA
IsNotHeight
CallObjectEx
InsertWindowOld
FormatDeviceOld
FindFolderExA
IncrementMutexExA
IsValidEventOld
LoadNameOld
ModifySizeOld
InstallWindowInfoNew
RtlConfigEx
CopyListOld
ValidateExpressionW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zek
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.On59 Size: 3KB - Virtual size: 2KB

.Zek Size: 1024B - Virtual size: 822B

.Re82 Size: 22KB - Virtual size: 25KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 512B - Virtual size: 450B

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 140KB - Virtual size: 140KB

.On59
Size: 3KB - Virtual size: 2KB

.Zek
Size: 1024B - Virtual size: 822B

.Re82
Size: 22KB - Virtual size: 25KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 512B - Virtual size: 450B

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB