365683e9ce7edcb2593d33f6b5c7fb7e39ea8c293102e777fe91519a5b7221b0

Sharing

Copy URL Twitter E-mail

General

Target

365683e9ce7edcb2593d33f6b5c7fb7e39ea8c293102e777fe91519a5b7221b0
Size

304KB
MD5

3edb45bd210664cf3887fa8394b13bc0
SHA1

ab73a6a16e1cbd3e5d0f9f385bd6b29d2340bcbb
SHA256

365683e9ce7edcb2593d33f6b5c7fb7e39ea8c293102e777fe91519a5b7221b0
SHA512

4328e7bc09629826866d5e8e0298a7e47e4d49850dd102660c1ab8558421991bd27d914e2cf4cc702155ea55c680c6744bc942bb9935f69a6760fe6394ca0198
SSDEEP

6144:+AaEUlNTw9QK8FGFAj7Ys0tXKpgTjs2pcAHDPKC6KAtmK+:+JNTKUYzapg/PDPpO

Score

N/A

Malware Config

Signatures

Files

365683e9ce7edcb2593d33f6b5c7fb7e39ea8c293102e777fe91519a5b7221b0
.exe windows x86

45f90009d70c0f9dc816ea995c8c3049

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegOpenKeyExW

kernel32

TlsGetValue
LockResource
CreateEventW
TlsFree
InterlockedPushEntrySList
FindFirstFileW
SizeofResource
SwitchToThread
lstrcmpW
CloseHandle
WaitForSingleObject
FindResourceW
GetSystemTimeAsFileTime
GetComputerNameW
CopyFileA
OutputDebugStringW
UnmapViewOfFile
LoadResource
VirtualFree
MapViewOfFile
CopyFileW
DeleteCriticalSection
HeapDestroy
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
lstrlenW
GlobalUnlock
IsDebuggerPresent
HeapFree
CreateFileA
GetShortPathNameW
SetLastError
GetCurrentDirectoryW
GetFileSize
FindClose
GlobalLock
FindNextFileW
TlsAlloc
EnumResourceNamesW
CreateDirectoryW
HeapReAlloc
EnterCriticalSection
CreateFileW
LeaveCriticalSection
ReadFile
GetFullPathNameW
FindResourceExW
GetCurrentThreadId
CreateThread
HeapAlloc
GlobalAlloc
InterlockedPopEntrySList
VirtualAlloc
SetFileAttributesW
HeapSize
RaiseException
FlushInstructionCache
TlsSetValue
IsValidCodePage
GetProcessHeap
lstrlenA
FreeLibrary
GetACP
RemoveDirectoryW
GetSystemDefaultLCID
MulDiv
SetFileAttributesA
UnhandledExceptionFilter
IsProcessorFeaturePresent
SetThreadPriority
GetModuleHandleW
LocalAlloc
ExpandEnvironmentStringsW
CreateFileMappingW
WideCharToMultiByte
VirtualAllocEx

gdi32

GetDeviceCaps
LPtoDP
TextOutW
DeleteObject
SetMapMode
SetWindowOrgEx
DeleteDC
SetWindowExtEx
RestoreDC
DeleteMetaFile
CreateFontIndirectW
CloseMetaFile
SetTextAlign
CreateMetaFileW
SetViewportOrgEx
SaveDC
CreateRectRgnIndirect
GetTextColor

oleaut32

GetErrorInfo
UnRegisterTypeLi
DispCallFunc
SysFreeString
SafeArrayGetVartype
SysAllocStringByteLen
SysStringLen
SafeArrayAccessData
VariantCopy
SafeArrayGetElement
SafeArrayUnaccessData
SysAllocStringLen
SafeArrayGetLBound
VarBstrCat
SafeArrayCopy
VariantInit
OleCreatePropertyFrame
SafeArrayLock
VariantChangeType
VarBstrCmp
SysStringByteLen
LoadTypeLi
SafeArrayUnlock
SafeArrayCreate
LoadRegTypeLi
VariantClear
SysAllocString
SafeArrayGetUBound
RegisterTypeLi
SafeArrayDestroy

user32

GetWindowTextLengthW
GetParent
IntersectRect
GetClientRect
MonitorFromWindow
GetClassInfoExW
GetWindowLongW
MapDialogRect
EndDialog
OffsetRect
DestroyWindow
CharToOemBuffA
SendMessageA
SendMessageW
MapWindowPoints
GetClassNameW
CreateWindowExW
PostMessageW
SetWindowRgn
IsWindowEnabled
RegisterClassExW
InvalidateRect
GetWindow
GetMenu
UnregisterClassA
CallNextHookEx
SetWindowTextW
UnhookWindowsHookEx
EqualRect
GetWindowRect
LoadCursorW
IsChild
UnionRect
CharNextW
PtInRect
GetWindowTextW
SetWindowPos
SetFocus
AdjustWindowRectEx
EndPaint
GetDC
IsWindow
BeginPaint
GetMonitorInfoW
DefWindowProcW
MessageBoxExW
ShowWindow
SetCursor
SetWindowLongW
GetKeyState
ReleaseDC
SetWindowsHookExW
GetFocus
EnableWindow
CallWindowProcW
SetWindowContextHelpId
UpdateLayeredWindow
CharUpperA
SetTimer
GetDesktopWindow
SetDlgItemTextW
GetSysColor
CreateDialogParamW
WinHelpA
GetSystemMetrics
PeekMessageA
wsprintfW
CharLowerW
wsprintfA
LoadMenuW
GetScrollPos
SendDlgItemMessageA
LoadImageW
GetMenuState
GetDCEx
GetForegroundWindow
PostQuitMessage
CheckMenuItem
IsIconic
OpenClipboard
GetActiveWindow
RegisterWindowMessageW

ole32

CreateOleAdviseHolder
OleRegGetUserType
CLSIDFromProgID
IIDFromString
StringFromGUID2
CreateDataAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
ProgIDFromCLSID
OleRegGetMiscStatus
CLSIDFromString
StringFromCLSID
CoCreateGuid
CreateStreamOnHGlobal
OleRegEnumVerbs

shlwapi

PathIsRootW
PathFileExistsW
PathFindFileNameW
PathIsRelativeW
PathIsURLW
PathStripToRootW
PathRemoveExtensionW
PathStripPathW
PathCanonicalizeW

cmpbk32

PhoneBookEnumNumbersWithRegionsZero
PhoneBookGetPhoneDUNA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45f90009d70c0f9dc816ea995c8c3049

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

oleaut32

user32

ole32

shlwapi

cmpbk32

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 271KB - Virtual size: 1.1MB

.rdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 6KB - Virtual size: 8KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 271KB - Virtual size: 1.1MB

.rdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 6KB - Virtual size: 8KB