29338ed0ec74d6bfe7f60d4c4f925d45236041d9be693b6866a1adb48fce199f

Sharing

Copy URL Twitter E-mail

General

Target

29338ed0ec74d6bfe7f60d4c4f925d45236041d9be693b6866a1adb48fce199f
Size

235KB
MD5

2a731bc2c56af1d29b08a9be6463a590
SHA1

ca35beac74bd5aeb8e42ed8f512cf7472c4f7400
SHA256

29338ed0ec74d6bfe7f60d4c4f925d45236041d9be693b6866a1adb48fce199f
SHA512

91d6ce6e6150dd5b53cf5a9c395cd193f54a26259567d3be5cfb556a9bfb84485b7c02b862af8af8f0b6f988964eea229cc871cff79fbc6526900bce9b285dcf
SSDEEP

3072:1GglhtbgBSp6xwky27GnNI2z8KB1x2uv4rJjcI9kBUn4W0gUJosbFRH4hQpTp64Z:8glXUopoc62Dr0Fx4BgIouFRYc64oOT

Score

N/A

Malware Config

Signatures

Files

29338ed0ec74d6bfe7f60d4c4f925d45236041d9be693b6866a1adb48fce199f
.exe windows x86

0fdf9d32a66cd1bd4c6876923678df3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA

gdi32

CreateEllipticRgn
CreateDIBitmap
GetDeviceCaps
ExtTextOutA
SetWindowExtEx
SetMapMode
DeleteObject
GetClipBox
SetViewportExtEx
GetRelAbs
DeleteDC
RestoreDC
RoundRect
TextOutA
ScaleViewportExtEx

kernel32

GlobalHandle
FindClose
EnterCriticalSection
GetFileType
GlobalAddAtomA
LocalReAlloc
RtlUnwind
HeapFree
LocalUnlock
LCMapStringW
GetThreadLocale
GetCurrentThreadId
GetCommandLineA
IsValidLocale
DeleteFileA
TlsGetValue
FlushFileBuffers
ReadFile
GetFullPathNameA
SetConsoleTextAttribute
GlobalFree
ReleaseActCtx
IsBadWritePtr
InitializeCriticalSection
GetVolumeInformationA
InterlockedDecrement
SetFilePointer
GetOEMCP
GetDriveTypeA
GlobalGetAtomNameA
FreeEnvironmentStringsA
GetCurrentProcess
HeapSize
GetLastError
SystemTimeToTzSpecificLocalTime
WideCharToMultiByte
VirtualAlloc
MulDiv
HeapReAlloc
GetStartupInfoA
ClearCommError
SetConsoleCursorInfo
GetCurrentDirectoryA
SetFileAttributesA
GetVersion
SetEnvironmentVariableA
TlsSetValue
SetUnhandledExceptionFilter
Beep
FileTimeToLocalFileTime
GetVersionExA
LockResource
DuplicateHandle
lstrcatA
LoadResource
GetWindowsDirectoryA
GetModuleHandleA
GetEnvironmentVariableA
lstrcpynA
GetEnvironmentStringsW
FileTimeToSystemTime
HeapDestroy
CloseHandle
GetModuleFileNameA
GetProcessVersion
LCMapStringA
GlobalUnlock
LeaveCriticalSection
SetErrorMode
GetEnvironmentStringsA
GlobalDeleteAtom
GetStdHandle
GetSystemDirectoryA
InterlockedIncrement
SetHandleCount
SetEndOfFile
DosDateTimeToFileTime
LocalAlloc
InitializeSListHead
GetFileAttributesA
lstrcmpiA
GetStringTypeA
SetLastError
GetProcAddress
GetStringTypeW
FlushInstructionCache
MultiByteToWideChar
SetCurrentDirectoryA
GlobalAlloc
CompareStringA
GlobalLock
LoadLibraryA
FreeEnvironmentStringsW
HeapAlloc
FindNextFileA
FreeLibrary
GetTimeZoneInformation
Toolhelp32ReadProcessMemory
LocalFree
FindResourceA
VirtualFree
GetCPInfo
LocalFileTimeToFileTime
IsBadCodePtr
GetFileTime
lstrcpyA
CompareStringW
RaiseException
GlobalFindAtomA
IsBadReadPtr
SetSystemTime
TlsFree
SetStdHandle
GlobalFlags
LockFile
SystemTimeToFileTime
lstrcmpA
IsDebuggerPresent
GetACP
DeleteCriticalSection
CreateFileA
HeapCreate
ExitProcess
UnlockFile
UnhandledExceptionFilter
GetCurrentThread
WriteFile
TlsAlloc
Sleep
GetFileSize
FindFirstFileA
lstrlenA

winmm

timeGetSystemTime
mmioAdvance
waveOutGetPitch

advapi32

RegCreateKeyExA
RegSetValueExA
OpenThreadToken
RegCloseKey
SetSecurityDescriptorControl
LsaICLookupNamesWithCreds
RegOpenKeyExA
LockServiceDatabase
RegDeleteValueA
AddUsersToEncryptedFile
GetAclInformation
MSChapSrvChangePassword
LsaEnumeratePrivileges
SystemFunction016

user32

GetMessagePos
PtInRect
SetWindowsHookExA
UpdateWindow
GetWindowTextLengthA
GetSubMenu
UnregisterClassA
GetClassNameA
LoadCursorA
MapWindowPoints
GetMenuItemCount
GetSysColor
GetFocus
EndPaint
GetActiveWindow
IsWindowVisible
RemovePropA
IsWindow
ValidateRect
ShowWindow
CheckMenuItem
PeekMessageA
SetWindowTextA
DestroyWindow
GetClientRect
EnableWindow
CharUpperA
GetWindowLongA
GetClassInfoA
GetMenuItemID
DrawIcon
GrayStringA
ExitWindowsEx
IsDialogMessageA
WinHelpA
CallWindowProcA
SetWindowLongA
CreateDialogIndirectParamA
EndDialog
LoadStringA
GetParent
IsWindowEnabled
MessageBoxA
GetDlgCtrlID
TranslateMessage
EnableMenuItem
LoadBitmapA
GetSystemMetrics
GetMenuCheckMarkDimensions
SystemParametersInfoA
GetWindowPlacement
CreateWindowExA
PostQuitMessage
SetPropA
GetSysColorBrush
GetKeyState
SetMenuItemBitmaps
wsprintfA
SetActiveWindow
GetTopWindow
GetMenuState
BeginPaint
SendMessageA
GetWindowRect
PostMessageA
GetWindow
GetLastActivePopup
RegisterClassA
GetForegroundWindow
GetMessageA
GetWindowTextA
GetDC
SetWindowPos
GetDlgItem
ReleaseDC
CallNextHookEx
SetForegroundWindow
SendDlgItemMessageA
LoadIconA
GetMenu
GetCursorPos
ClientToScreen
GetCapture
CopyRect
UnhookWindowsHookEx
GetPropA
DestroyMenu

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fdf9d32a66cd1bd4c6876923678df3f

Headers

File Characteristics

Imports

comdlg32

gdi32

kernel32

winmm

advapi32

user32

Sections

.text Size: 201KB - Virtual size: 201KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 23KB

.rsrc Size: 512B - Virtual size: 504B

.text
Size: 201KB - Virtual size: 201KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 23KB

.rsrc
Size: 512B - Virtual size: 504B