7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414

Sharing

Copy URL

Twitter E-mail

General

Target

7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414
Size

344KB
MD5

e52e4caf10dd9bdfd09cc1b0d2487790
SHA1

ab01969865ee9011fb362ca49c17c57b57160f8c
SHA256

7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414
SHA512

16403527c6a8394bee7a725c3c9473a283e1ec3ca9f0f0468a520e88eef418a2bd6175acb56ad06181aa8952d59b514bdf85c4c5b9dd6ab9667cdf1abc6b8f48
SSDEEP

6144:oXMRNZdDjDX/atzGiMR5MwV7MGVlLE4NqQ1h4Hh7nK69OP:d3DXCtzGiMRGw6GV/R1hKbKyOP

Score

N/A

Malware Config

Signatures

Files

7703936317e9437b203727a2203c907172869ed65ac28c213a60ce21c8bce414
.exe windows x86

47b1704dd496df8efae965682910aa38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogIndirectParamA
IsWindow
FindWindowExA
BeginDeferWindowPos
EndDialog
ChildWindowFromPointEx
ArrangeIconicWindows
CascadeWindows
MessageBoxExA
DialogBoxIndirectParamA
DefDlgProcA

gdi32

DeleteDC
DeleteEnhMetaFile
ChoosePixelFormat
FillRgn
GdiComment
ExcludeClipRect
CreateFontA
CreateEllipticRgn
EnumObjects
EndDoc

advapi32

ReadEventLogA
RegQueryMultipleValuesA
ClearEventLogW
RegisterEventSourceW
ReportEventA
RegEnumKeyExA
AccessCheck
OpenEventLogW
GetTokenInformation
DeregisterEventSource
RegOpenKeyExA
RegUnLoadKeyA

shlwapi

PathCompactPathExA
PathAddExtensionA
SHRegCreateUSKeyW
SHRegOpenUSKeyW
PathCombineW
PathMatchSpecW
StrDupW
StrStrIA
PathIsContentTypeW
PathUnquoteSpacesW
StrSpnW
PathFileExistsW
StrCmpNW
PathMakeSystemFolderA
PathSetDlgItemPathW

kernel32

MultiByteToWideChar
ReleaseMutex
GetSystemDefaultLangID
CreateMutexA
GlobalReAlloc
CompareStringA
VirtualLock
GetStartupInfoA
LocalReAlloc
GlobalFlags
GetUserDefaultLCID
ReleaseSemaphore
GetStringTypeW
GlobalLock
OpenMutexA
GetProfileStringA
WritePrivateProfileSectionA
VirtualAllocEx
GetProcAddress
GetModuleHandleA
LocalFree

credui

CredUIReadSSOCredW
CredUIParseUserNameW
CredUIStoreSSOCredW
CredUIParseUserNameA

winscard

SCardReleaseContext

msvcrt

_exit
_acmdln
exit
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47b1704dd496df8efae965682910aa38

Headers

File Characteristics

Imports

user32

gdi32

advapi32

shlwapi

kernel32

credui

winscard

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 327KB - Virtual size: 327KB

.data Size: 512B - Virtual size: 119KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 327KB - Virtual size: 327KB

.data
Size: 512B - Virtual size: 119KB

.rsrc
Size: 5KB - Virtual size: 4KB