6c79ed3af869980923460c15aba1a0886fcfd11587826f06c3060f1e04f5b2bf

Sharing

Copy URL Twitter E-mail

General

Target

6c79ed3af869980923460c15aba1a0886fcfd11587826f06c3060f1e04f5b2bf
Size

178KB
MD5

d948b3cfc51c0434f551a3e43aba4939
SHA1

92ffb7ca35fa8de1435f9bf6d624006232abf17f
SHA256

6c79ed3af869980923460c15aba1a0886fcfd11587826f06c3060f1e04f5b2bf
SHA512

144200e2f5d0cc13e0ea2fe3c57127b7e23d34eeaf767ffdf16c1f8119f0ecbbf906acd0787cfc531767fd67870821d9607b7573f8ae7e5e841e017383ab4904
SSDEEP

3072:JoGSux9TFVOxjUb1kk+GuCnL3ngw+1EkfV3qad/R55jzptzB749Qt8Oy:JoyFUR2ayr1aJ55jzh71

Score

N/A

Malware Config

Signatures

Files

6c79ed3af869980923460c15aba1a0886fcfd11587826f06c3060f1e04f5b2bf
.exe windows x86

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

QueryWorkingSet

user32

DialogBoxParamW
BringWindowToTop
EnableScrollBar
LoadStringW
AttachThreadInput
AdjustWindowRectEx
PtInRect
HiliteMenuItem
GetMenuState
RemovePropW
CharNextA
InsertMenuItemW
InvalidateRgn
DrawTextA
InSendMessage
GetWindowRect
GrayStringW
RegisterWindowMessageW
DefWindowProcW
GetWindowTextW
CreateMenu
GetClassLongA
GetScrollInfo
SetCursorPos
RemoveMenu
FindWindowW
SetClassLongW
CallWindowProcA
GetWindowLongW
SetWindowTextW
SetRect
GetFocus
GetKeyboardLayout
GetWindowDC
CreateCaret
ChildWindowFromPointEx
UpdateWindow
InSendMessageEx
EnumChildWindows
DragObject
IsWindowEnabled
DefWindowProcA
LoadCursorA
GetForegroundWindow
SetLastErrorEx
MessageBoxExW
CharNextW
DialogBoxIndirectParamA
LookupIconIdFromDirectory
mouse_event
DeleteMenu
GetSysColor
DefFrameProcA
TrackPopupMenu
MessageBoxW
TabbedTextOutW
wvsprintfA
MonitorFromRect
DialogBoxParamA
OpenIcon
ShowScrollBar
RegisterClassW
GetUpdateRgn
ShowCursor
wsprintfW
GetKeyState
ShowWindow
GetMenuCheckMarkDimensions
GetScrollPos
InvertRect
EndPaint
GetClipCursor
CreateWindowExA
SetMenuItemBitmaps
GetShellWindow
DispatchMessageW
GetUpdateRect
LoadIconA
DestroyAcceleratorTable
GetClassLongW
DestroyCursor
IsChild
BeginDeferWindowPos
DrawIcon
GetKeyboardLayoutNameW
DrawTextExW
GetDlgItemInt
CheckRadioButton
CharPrevW
InsertMenuW
CascadeWindows
DrawTextW
SetWindowRgn
GetTopWindow
AdjustWindowRect
SetDlgItemTextA
LoadBitmapW
DefDlgProcA
ModifyMenuW
GetClassInfoExW
GetMessageExtraInfo
InternalGetWindowText
SetRectEmpty
RegisterWindowMessageA
GetSubMenu
CharUpperW

kernel32

GetDateFormatA
GetVersion
RegisterWaitForSingleObject
GetNumberFormatA
FindNextFileW
FileTimeToDosDateTime
FindResourceExW
GetStringTypeExW
SetThreadAffinityMask
GetBinaryTypeA
GetPriorityClass
VirtualFree
GetThreadLocale
GetTempPathA
AreFileApisANSI
GetProcAddress
DisconnectNamedPipe
VirtualAlloc
CloseHandle
FileTimeToLocalFileTime
CreateEventA
SetCommBreak
GetTickCount
GetComputerNameW
GetShortPathNameW
GetSystemDirectoryA
GetUserDefaultLCID
GlobalHandle
GetCompressedFileSizeW
TransactNamedPipe
LocalFree
GlobalFlags
SleepEx
GetFileType
VerifyVersionInfoW
GetModuleHandleW
IsBadReadPtr
EnterCriticalSection
CreateMutexA
VirtualProtect
SystemTimeToFileTime
CreateFileW
GetStartupInfoA
WaitForMultipleObjects
GlobalDeleteAtom
EnumResourceNamesA
CreateFileA
GetSystemDefaultLangID
GetThreadTimes
GetUserDefaultUILanguage
EscapeCommFunction
SetSystemTime
SetFileApisToOEM
LockResource
lstrlenA
GetFileAttributesW
GetCurrentThreadId
CopyFileW
LoadLibraryExW
SetCommTimeouts
lstrcatA
LoadResource
HeapValidate
GetThreadContext
SetWaitableTimer
DuplicateHandle
SetFileAttributesA
WaitForSingleObjectEx
GetCommModemStatus
CreateWaitableTimerW
SetHandleInformation
CreateFileMappingA
LocalUnlock
lstrcpynW
GetLastError
WaitForMultipleObjectsEx
UnmapViewOfFile
GetCommState
FindClose
FoldStringW
FormatMessageW
DeviceIoControl
GetLocalTime
WideCharToMultiByte
GetHandleInformation
MoveFileA
IsBadWritePtr
LoadLibraryExA
FindFirstChangeNotificationW
ReleaseMutex
LockFile
CancelIo
FindFirstFileW
IsDBCSLeadByte
AddAtomA
CreateDirectoryA
FileTimeToSystemTime
GlobalFree
lstrcatW
LocalReAlloc
GetTimeFormatW
SetFilePointer
GlobalMemoryStatusEx
LCMapStringW
SizeofResource
LeaveCriticalSection

rtutils

TracePrintfW

Exports

Exports

DeleteMemoryOld
FormatConfigExW
IsNotKeyNameW
GlobalPointerW
CallProject
InstallSizeEx
FormatAppNameNew
GeneratePointerW
DecrementCharW
IsValidProfileOld
IsNotPointEx
InstallDirectory
CloseFileNew
ProjectOld
LoadProjectW
ValidateFolderPathW
FindHeaderW
PutConfigA
FormatMutantEx
RemoveFullNameExA
ShowDate
EnumPenW
EnumTaskA
CallModuleExA
CallDateTimeA
IsValidObjectExW
GlobalAppNameOriginal
CallWidthW
ValidateMonitorA
CallPenW
IncrementProcessExA
CloseAnchorExW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.On59
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97a98395bc1168c18a498c0ec2fef5fd

Headers

DLL Characteristics

File Characteristics

Imports

psapi

user32

kernel32

rtutils

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.Reel Size: 2KB - Virtual size: 5KB

.On59 Size: 5KB - Virtual size: 4KB

.Re82 Size: 23KB - Virtual size: 23KB

.Lax503 Size: 512B - Virtual size: 296B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.Reel
Size: 2KB - Virtual size: 5KB

.On59
Size: 5KB - Virtual size: 4KB

.Re82
Size: 23KB - Virtual size: 23KB

.Lax503
Size: 512B - Virtual size: 296B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB