3c47a4b5eceb682ff05bdf97c60615276ddccf48e4471ea31aa5d505ff88a54e

Sharing

Copy URL Twitter E-mail

General

Target

3c47a4b5eceb682ff05bdf97c60615276ddccf48e4471ea31aa5d505ff88a54e
Size

165KB
MD5

1413280a13675522de6617a894f19820
SHA1

a619f3b5898f2195dd8903a23843b3fb78ad54c4
SHA256

3c47a4b5eceb682ff05bdf97c60615276ddccf48e4471ea31aa5d505ff88a54e
SHA512

5c323940097833a60739ee9b4c3d3a1fd433549f91b19dfcc16c6de35b1cda4ba8f88bd84c0b3f3ce54bb7f860dd1e6901985bd2011673a4760c1dac93b1e322
SSDEEP

3072:bjjmggA14r/P/tYQ16Do1gHglBhMo/CaxT1TGu9v2TQHjfx2gu4DVe6J6k9i2JMO:P7g0s3/tL1eo1mgdMyCGTw+2MDfAP4Dd

Score

N/A

Malware Config

Signatures

Files

3c47a4b5eceb682ff05bdf97c60615276ddccf48e4471ea31aa5d505ff88a54e
.exe windows x86

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeTypeEx
VariantCopyInd

ole32

IsEqualGUID

advapi32

RegOpenKeyA
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
AdjustTokenPrivileges

user32

DestroyMenu
LoadStringA
DefMDIChildProcA
GetFocus
SetScrollInfo
IsWindowEnabled
CreateIcon
ExitWindowsEx
SetWindowLongA
GetKeyNameTextA
TranslateMessage
MapVirtualKeyA
GetMenu
SetActiveWindow
GetWindow
SendMessageA
DefFrameProcA
IntersectRect
LoadBitmapA
GetWindowTextA
CreateWindowExA
GetWindowLongA
PeekMessageA
KillTimer
DrawFrameControl
CreatePopupMenu
RemoveMenu
GetDesktopWindow
IsRectEmpty
GetMenuItemID
LoadIconA
PtInRect
GetLastActivePopup
ScrollWindow
DrawTextA
WindowFromPoint
GetActiveWindow
GetKeyboardState
InvalidateRect
EqualRect
GetTopWindow
CallWindowProcA
UpdateWindow
RedrawWindow
SetClassLongA
IsWindow
SetWindowPos
ClientToScreen
CheckMenuItem
GetWindowRect
GetMenuItemInfoA
GetMenuStringA
DrawIconEx
RegisterClipboardFormatA
GetCursor
GetPropA
SetScrollRange
IsZoomed
GetClipboardData
DrawIcon
GetCursorPos
GetDCEx
RegisterClassA
CharNextA
GetKeyState
SetMenu
SetCursor
LoadCursorA
SetMenuItemInfoA
UnregisterClassA
IsDialogMessageA
FindWindowA
EndPaint
BeginPaint
wsprintfA
AdjustWindowRectEx
GetForegroundWindow
CreateMenu
UnhookWindowsHookEx
DestroyWindow
SetWindowPlacement
IsIconic
SetScrollPos
MessageBoxA
TranslateMDISysAccel
GetWindowPlacement
DispatchMessageA
GetWindowDC
GetClassInfoA
EnableMenuItem
MapWindowPoints
GetWindowThreadProcessId
ScreenToClient
FillRect
TrackPopupMenu
SetCapture
DeleteMenu
DrawEdge
ShowOwnedPopups
SetPropA
EnumWindows
GetSystemMetrics
SetRect
GetMenuItemCount
GetMenuState
IsWindowVisible
InflateRect
CharLowerBuffA
ShowCursor
GetScrollRange
ShowWindow
SetWindowsHookExA
DestroyIcon
CallNextHookEx
GetCapture
GetIconInfo
WinHelpA
GetDC
GetScrollPos
PostQuitMessage
GetKeyboardLayoutList
InsertMenuA
OffsetRect
LoadKeyboardLayoutA
IsChild
DestroyCursor
PostMessageA
OemToCharA
CharLowerA
GetScrollInfo
SetForegroundWindow
GetClientRect
ActivateKeyboardLayout
InsertMenuItemA
EnumThreadWindows
SetTimer
FrameRect
SetFocus
SystemParametersInfoA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardLayout
ReleaseCapture
GetSystemMenu
EnableWindow
GetSubMenu
EnableScrollBar
GetSysColor
ReleaseDC
DrawMenuBar
GetKeyboardType
RemovePropA
ShowScrollBar
WaitMessage

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetCPInfo
GetLocalTime
GetPrivateProfileStringA
GetStringTypeW
EnterCriticalSection
FreeLibrary
lstrcpynA
GetTickCount
GetThreadLocale
Sleep
CompareStringA
RtlUnwind
WriteFile
GetVersionExA
GetStdHandle
GetCurrentProcessId
CreateFileA
SetLastError
InitializeCriticalSection
GetModuleHandleA
LockResource
GetVersion
lstrcmpA
HeapAlloc
WinExec
EnumCalendarInfoA
GetLocaleInfoA
GetCurrentProcess
GlobalLock
GlobalUnlock
lstrcpyA
GetProcAddress
TlsSetValue
TlsGetValue
GetWindowsDirectoryA
LocalFree
SetEndOfFile
FindClose
GlobalReAlloc
TlsFree
TlsAlloc
GetFileType
GetProcessHeap
GetACP
WaitForSingleObject
GetModuleFileNameA
lstrlenA
LoadLibraryExA
InterlockedIncrement
LoadLibraryA
GlobalAlloc
LocalAlloc
SetFilePointer
CreateEventA
VirtualQuery
SizeofResource
ReadFile
SetConsoleCtrlHandler
GetFileSize
SetErrorMode
FreeResource
GetCommandLineA
VirtualAlloc
SetEvent
GlobalFree
GlobalDeleteAtom
GetDiskFreeSpaceA
FormatMessageA
DeleteFileA
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
HeapFree
ExitProcess
SetHandleCount
GetStartupInfoA
RaiseException
FindResourceA
GetEnvironmentStringsA
CreateThread
GlobalAddAtomA
GetSystemDirectoryA
GetSystemInfo
MulDiv
LeaveCriticalSection
FindFirstFileA
GetOEMCP
DeleteCriticalSection
CloseHandle
VirtualFree
MultiByteToWideChar
GetLastError
GlobalHandle
LoadResource
InterlockedDecrement
SetThreadLocale

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

Imports

oleaut32

ole32

advapi32

user32

version

kernel32

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB