878d158d828831c4264780498f8ddf694208443265ddfc90fefff0092780e64b

Sharing

Copy URL Twitter E-mail

General

Target

878d158d828831c4264780498f8ddf694208443265ddfc90fefff0092780e64b
Size

263KB
MD5

4994e3276137e13d7761239b09b11af2
SHA1

6986087958167b965e4a69c18601e069ca461e50
SHA256

878d158d828831c4264780498f8ddf694208443265ddfc90fefff0092780e64b
SHA512

6554591adc929eb638097306df2ef15fae978b163a37a6564f83c2c67fb1a431804d458f9e14b52a7d38123eb53172be270e4fde3e5427eb3c0111da699e8e25
SSDEEP

6144:qnmTLNeKhGz6WPwWgEEqWKD1nvSkQF1r0cNWEFNp:m+LN3qlaiDuF1wctFNp

Score

N/A

Malware Config

Signatures

Files

878d158d828831c4264780498f8ddf694208443265ddfc90fefff0092780e64b
.exe windows x86

3ff4cf260dc4625f9b89d666261e17dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
RemoveDirectoryW
GetWindowsDirectoryW
SystemTimeToFileTime
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
CreateDirectoryW
ExpandEnvironmentStringsA
GetSystemTime
GetLocalTime
CreateEventW
WaitForSingleObject
lstrcmpW
CompareFileTime
lstrcmpiW
FindResourceW
LoadResource
FreeLibrary
MoveFileW
FileTimeToSystemTime
GetTimeFormatW
GetDateFormatW
lstrcpynW
GetModuleHandleW
lstrlenW
lstrlenA
LocalFree
CreateMutexW
GetProcAddress

user32

GetSysColorBrush
RemoveMenu
GetSubMenu
GetSysColor
LoadCursorW
GetFocus
IsWindow
SetTimer
InvalidateRect
GetCursorPos
RegisterWindowMessageW
GetTopWindow
MoveWindow
GetForegroundWindow
PeekMessageW
GetMenuState
GetMenuItemCount
AppendMenuW
LoadBitmapW
CreatePopupMenu
GetDesktopWindow
EnableWindow
SendMessageW
SetWindowPos
SetDlgItemTextW
GetSystemMetrics
CreateDialogParamW
DestroyIcon
EnableMenuItem
PostMessageW
CopyRect
GetMenuItemInfoW
CreateMenu
GetMenuItemID

gdi32

CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreateRectRgn
CreateHatchBrush
CreateDIBSection
DeleteObject
CreatePatternBrush
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW

comctl32

ImageList_GetIconSize

usp10

UspFreeMem
ScriptString_pSize
ScriptStringValidate
ScriptCPtoX

licmgr10

DllCanUnloadNow
DllUnregisterServer
DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ECT
Size: 512B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LDWU
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mX
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RxwII
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.H
Size: 74KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zGmBj
Size: 5KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MK
Size: 3KB - Virtual size: 707KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpLG
Size: 138KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ff4cf260dc4625f9b89d666261e17dc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

usp10

licmgr10

Sections

.text Size: 16KB - Virtual size: 16KB

.ECT Size: 512B - Virtual size: 19KB

.LDWU Size: 4KB - Virtual size: 33KB

.rdata Size: 3KB - Virtual size: 38KB

.mX Size: 4KB - Virtual size: 32KB

.RxwII Size: 4KB - Virtual size: 57KB

.H Size: 74KB - Virtual size: 82KB

.zGmBj Size: 5KB - Virtual size: 1.1MB

.data Size: 6KB - Virtual size: 326KB

.MK Size: 3KB - Virtual size: 707KB

.tpLG Size: 138KB - Virtual size: 204KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 16KB

.ECT
Size: 512B - Virtual size: 19KB

.LDWU
Size: 4KB - Virtual size: 33KB

.rdata
Size: 3KB - Virtual size: 38KB

.mX
Size: 4KB - Virtual size: 32KB

.RxwII
Size: 4KB - Virtual size: 57KB

.H
Size: 74KB - Virtual size: 82KB

.zGmBj
Size: 5KB - Virtual size: 1.1MB

.data
Size: 6KB - Virtual size: 326KB

.MK
Size: 3KB - Virtual size: 707KB

.tpLG
Size: 138KB - Virtual size: 204KB

.rsrc
Size: 2KB - Virtual size: 2KB