4b89b71b1226a71f2b17d30afd74e6f323e78285097f9d48928a7b2db79f8f3b

Sharing

Copy URL Twitter E-mail

General

Target

4b89b71b1226a71f2b17d30afd74e6f323e78285097f9d48928a7b2db79f8f3b
Size

197KB
MD5

04e47dc5bc22942afd5f414ac7d75690
SHA1

c48f217610648f648fa2d6061fc6abae2403db5e
SHA256

4b89b71b1226a71f2b17d30afd74e6f323e78285097f9d48928a7b2db79f8f3b
SHA512

a79d14b1aa8ce2c3ccf74660c68623640479ed1b260cfe8a2e26df3b89b351b089f642c24af6932f85f5a61b215c9501325ae6c3d8b88f8dfc1201f126ce1f96
SSDEEP

3072:gYuzcf/Xj9GaWyQvGk6ZdTb0zVjO6KhfSpsKsnUxouOTJrGD8qgLGFPJmCaz:SzmxGzlvGHLTb0zVtK9P3qoID8TGFG

Score

N/A

Malware Config

Signatures

Files

4b89b71b1226a71f2b17d30afd74e6f323e78285097f9d48928a7b2db79f8f3b
.exe windows x86

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetModuleHandleA
GetSystemWindowsDirectoryW
lstrcmpiW
GetACP
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
SetLastError
CloseHandle
GetCPInfo
CreateFileW
FileTimeToSystemTime
GetDateFormatW
lstrcpyW
IsValidCodePage
FileTimeToLocalFileTime
GlobalAlloc
GetLastError
GetCurrentProcess
WideCharToMultiByte
RemoveDirectoryA
InterlockedDecrement
MultiByteToWideChar
OutputDebugStringA
LocalReAlloc
GetProcAddress
GetModuleFileNameW
GlobalUnlock
SetUnhandledExceptionFilter
GetStartupInfoA
QueryPerformanceCounter
lstrlenW
FormatMessageW
GetEnvironmentStringsA
OutputDebugStringW
GetTickCount
GetSystemTimeAsFileTime
GlobalLock
GlobalFree
InterlockedIncrement
GetComputerNameW
IsBadReadPtr

msvcrt

_except_handler3
wcsstr
?terminate@@YAXXZ
free
malloc
??3@YAXPAX@Z
wcsrchr
_onexit
mbstowcs
memmove
wcscat
wcslen
__dllonexit
??2@YAPAXI@Z
_wcsicmp
wcscmp
wcstoul
__RTDynamicCast
wcscpy
_wcsupr
wcschr
vswprintf
_adjust_fdiv
_purecall
_initterm
??1type_info@@UAE@XZ

certcli

CAGetCertTypeFlags
CAFindByName
CAGetCertTypeKeySpec
CASetCertTypeFlags
CARemoveCACertificateType
CAGetCertTypeExtensions
CAEnumCertTypesForCA
CASetCertTypeExtension
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CACreateCertType
CAGetCertTypeProperty
CAGetCertTypePropertyEx
CACertTypeSetSecurity
CACloseCA
CAEnumNextCertType
CAAddCACertificateType
CAUpdateCertType
CAUpdateCA
CAGetCAProperty
CAFindCertTypeByName
CAFreeCAProperty
CACloseCertType
CAEnumCertTypes
CASetCertTypeProperty

user32

SetFocus
MessageBoxW
SetDlgItemTextW
LoadCursorW
LoadStringW
SystemParametersInfoW
WinHelpW
LoadIconW
InsertMenuItemW
DialogBoxParamW
RegisterClipboardFormatW
SendMessageW
EnableWindow
LoadBitmapW
PostMessageW
SetWindowTextW
GetDlgItemTextA
EndDialog
LoadImageW
GetWindowLongW
ReleaseDC
wsprintfW
SetCursor
GetDlgItem
SetWindowLongW
GetDC
GetParent
SendDlgItemMessageW

comctl32

PropertySheetW
CreatePropertySheetPageW

advapi32

RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

shell32

ShellExecuteExW
ShellExecuteW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

Imports

kernel32

msvcrt

certcli

user32

comctl32

advapi32

gdi32

shell32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 123KB - Virtual size: 2.3MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 123KB - Virtual size: 2.3MB

.rsrc
Size: 3KB - Virtual size: 2KB