5d5b9340ec0191c9827f59df8644343c35f300113e7df41ded2dd56d4a2a2f42

Sharing

Copy URL Twitter E-mail

General

Target

5d5b9340ec0191c9827f59df8644343c35f300113e7df41ded2dd56d4a2a2f42
Size

201KB
MD5

752927f32ae0d11a6e2f4927d6e16794
SHA1

238011fca774b9701640e1c488c8152ee0ffeed2
SHA256

5d5b9340ec0191c9827f59df8644343c35f300113e7df41ded2dd56d4a2a2f42
SHA512

cca29d2ae09ebcd5b73dc23a412c3ac710d38c5391a43024f5d507878e04c168a44edc1ee9dae3f81095a9f73e1b69598329facb2cee37ebb5c78529abe63d1e
SSDEEP

6144:ToGHohfBO/EjvZX+FLwCrRrYSRnWXAojbq:lIhpO/EjhX+frRrRnE9

Score

N/A

Malware Config

Signatures

Files

5d5b9340ec0191c9827f59df8644343c35f300113e7df41ded2dd56d4a2a2f42
.exe windows x86

17d63088ae86445957adb732beab99c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
GetFileType
CreateNamedPipeW
MoveFileA
CopyFileExA
GetProcAddress
SetErrorMode
OpenEventW
GlobalFindAtomW
ReadDirectoryChangesW
EnumCalendarInfoA
GetCommandLineA
GetModuleHandleA
ExpandEnvironmentStringsW
Sleep
TlsAlloc

user32

LoadImageW
DrawTextW
GetWindowRgn
GetAsyncKeyState
GetKeyboardType
UnregisterClassA
CreateWindowExA
PostMessageA
CheckRadioButton
PostMessageW
GetIconInfo
CharPrevA
UpdateLayeredWindow
GetActiveWindow
IsIconic
UnregisterClassW
FindWindowW
GetDC
RegisterWindowMessageW
GetKeyState
CreateAcceleratorTableW
GetScrollPos
GetCapture
DialogBoxParamA
MonitorFromPoint
GetDlgItem
CreateCaret
DestroyMenu
SendMessageW
GetDlgItemTextA
GetDC
GetWindowTextLengthW
MessageBoxW
GetWindowTextLengthA
CharNextA
CreateDesktopA
UpdateWindow
CopyRect
GetWindowTextA
RegisterClassA
EndMenu

gdi32

EnumFontFamiliesW
GetColorSpace
SetICMProfileA
CreateEnhMetaFileW
GetNearestPaletteIndex
SetROP2
GetTextAlign
GetRasterizerCaps
SetArcDirection
SetDeviceGammaRamp
CloseFigure
CreateDCW
CreatePolyPolygonRgn
CreatePolygonRgn
CreateFontIndirectExW
PlayEnhMetaFile
CreateDIBPatternBrushPt
GetCharacterPlacementW
GetTextExtentPointW
PolyBezier

advapi32

RegOpenKeyA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegEnumValueW
RegReplaceKeyW
RegEnumValueA
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
RegRestoreKeyA

shell32

StrCmpNA
StrStrIW
StrNCmpIA
StrNCmpIW
Shell_NotifyIconW
SHGetDiskFreeSpaceExW
StrNCmpW
StrChrIW

shlwapi

SHRegGetBoolUSValueA
SHOpenRegStreamW
AssocQueryStringByKeyA
PathStripPathA
StrCmpIW
PathUnquoteSpacesA
StrToInt64ExA
PathIsRootW
UrlUnescapeA
StrRChrW

Sections

.tcS
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.OXMZ
Size: 4KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sreVG
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.k
Size: 2KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RGEXB
Size: 4KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17d63088ae86445957adb732beab99c3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

Sections

.tcS Size: 11KB - Virtual size: 10KB

.OXMZ Size: 4KB - Virtual size: 495KB

.sreVG Size: 3KB - Virtual size: 7KB

.k Size: 2KB - Virtual size: 458KB

.data Size: 108KB - Virtual size: 422KB

.RGEXB Size: 4KB - Virtual size: 339KB

.rsrc Size: 67KB - Virtual size: 67KB

.reloc Size: 1024B - Virtual size: 850B

.tcS
Size: 11KB - Virtual size: 10KB

.OXMZ
Size: 4KB - Virtual size: 495KB

.sreVG
Size: 3KB - Virtual size: 7KB

.k
Size: 2KB - Virtual size: 458KB

.data
Size: 108KB - Virtual size: 422KB

.RGEXB
Size: 4KB - Virtual size: 339KB

.rsrc
Size: 67KB - Virtual size: 67KB

.reloc
Size: 1024B - Virtual size: 850B