1620a8c2de8018871b49fc0791bcecd247987e64b0c47dd5821f31ff26c6fb76

Sharing

Copy URL Twitter E-mail

General

Target

1620a8c2de8018871b49fc0791bcecd247987e64b0c47dd5821f31ff26c6fb76
Size

134KB
MD5

5c7d0d41dc146e5774eff96ba245036f
SHA1

c7fa2f08a2a4fbedc87fbadf3d395c4a278f2586
SHA256

1620a8c2de8018871b49fc0791bcecd247987e64b0c47dd5821f31ff26c6fb76
SHA512

8e7ba2834d377bf83f7ad8a92abd4003baf10c8331f9944eefbaf0402a296fc1b38dcd11a66a85c5714b2dc75e9fc4d5408e9d71b29babb6160ad6a46103ca80
SSDEEP

3072:cw1/WFymWCXs+QlODLKsNOW0cuOdc9tUOFMOkiHiAK:cwBWQmDc2XKTjOdc9

Score

N/A

Malware Config

Signatures

Files

1620a8c2de8018871b49fc0791bcecd247987e64b0c47dd5821f31ff26c6fb76
.exe windows x86

35181f3664c2f4161141bf95f2dd3930

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetFileAttributesExW
FindResourceW
ReadFile
TerminateProcess
LocalFree
GetDateFormatA
GetModuleFileNameW
lstrcpynW
VirtualAlloc
ExitProcess
IsProcessorFeaturePresent
UnhandledExceptionFilter
lstrlenW
GetACP
CompareStringW
HeapAlloc
GetConsoleMode
GetEnvironmentStringsW
GetSystemDefaultLangID
GetVersionExW
LCMapStringA
LockResource
QueryPerformanceCounter
GetPrivateProfileIntW
GlobalUnlock
LoadResource
SetUnhandledExceptionFilter
GetTempFileNameW
HeapReAlloc
GetUserDefaultLCID
LoadLibraryExW
LocalAlloc
GetCPInfo
GetOEMCP
GetCurrentThreadId
GetModuleHandleA
MulDiv
CopyFileW
LCMapStringW
RtlUnwind
WriteConsoleW
InitializeCriticalSection
lstrcpyW
FormatMessageW
WriteConsoleA
HeapCreate
HeapDestroy
LeaveCriticalSection
GetModuleFileNameA
EnterCriticalSection
GetStartupInfoA
RaiseException
GetStartupInfoW
CloseHandle
VirtualFree
FreeEnvironmentStringsW
GetTempPathW
WinExec
CreateFileA
GetSystemDirectoryW
ResetEvent
LoadLibraryA
lstrcpynA
lstrcmpiW
GetFileSize
SetLastError
GetPrivateProfileStringW
GetStringTypeA
InterlockedExchange
DebugBreak
CreateFileW
WaitForMultipleObjects
WideCharToMultiByte
GlobalAlloc
GetCurrentProcess
lstrcatW
LoadLibraryW
FindFirstChangeNotificationW
GlobalSize
GetCurrentThread
TlsSetValue
AddAtomA
GetVersion
FreeLibrary
CompareStringA
GetConsoleCP
TlsGetValue
GetCurrentProcessId
InterlockedDecrement
ExpandEnvironmentStringsW
TlsAlloc
lstrcmpW
CreateThread
VirtualQuery
SetStdHandle
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
HeapFree
FileTimeToSystemTime
lstrlenA
OutputDebugStringW
MultiByteToWideChar
VerLanguageNameW
TlsFree
OpenEventW
GetFileType
GetCommandLineW
GetLastError
ExpandEnvironmentStringsA
GetConsoleOutputCP
WaitForSingleObject
SetHandleCount
IsValidLocale
GlobalLock
GetFileAttributesW
GetWindowsDirectoryW
GetStringTypeW
EnumSystemLocalesA
GetTimeFormatA
SizeofResource
FlushInstructionCache
HeapSize
GetModuleHandleW
DeleteCriticalSection
SetConsoleCtrlHandler
GetDateFormatW
GetProcAddress
WritePrivateProfileStringW
IsValidCodePage
GetComputerNameW
IsDebuggerPresent
GetStdHandle
InterlockedIncrement
WritePrivateProfileSectionW
FindNextChangeNotification
SystemTimeToTzSpecificLocalTime

user32

GetWindowTextW
SendMessageW
MapWindowPoints
SetMenuDefaultItem
LoadBitmapW
GetCursorPos
AppendMenuW
IsClipboardFormatAvailable
ShowScrollBar
EndPaint
OffsetRect
InsertMenuW
DispatchMessageW
ScreenToClient
GetClassNameW
GetSysColorBrush
IntersectRect
TranslateMDISysAccel
SetCapture
RegisterClipboardFormatW
GetScrollInfo
GetDlgCtrlID
SetDlgItemTextW
SetForegroundWindow
SetDlgItemInt
TrackPopupMenuEx
SetMenu
DeferWindowPos
SetCaretPos
KillTimer
SetScrollInfo
ClientToScreen
TranslateMessage
IsMenu
InvalidateRect
RegisterClassW
GetMenuItemID
MonitorFromWindow
GetDC
DefFrameProcW
EndDeferWindowPos
PostMessageW
GetClassInfoW
WindowFromPoint
LoadStringA
LoadCursorW
CharLowerW
GetDlgItemTextW
DefMDIChildProcW
DestroyWindow
GetWindowLongW
InflateRect
UnregisterClassA
GetWindowTextLengthW
DrawMenuBar
SystemParametersInfoW
EndDialog
GetDoubleClickTime
SetParent
RegisterWindowMessageW
SetClipboardData
GetWindowThreadProcessId
PostQuitMessage
RegisterClassExW
CloseClipboard
CreatePopupMenu
FillRect
ModifyMenuW
ScrollWindowEx
CallWindowProcW
GetCapture
DestroyMenu
GetMenuItemInfoW
GetMessagePos
GetMonitorInfoW
GetMenuStringW
GetClientRect
DrawFocusRect
GetWindowPlacement
LockWindowUpdate
EnableWindow
GetDesktopWindow
DestroyCaret
LoadImageW
SetRectEmpty
TrackPopupMenu
GetSystemMetrics
GetActiveWindow
GetWindowLongA
DefWindowProcW
ReleaseDC
BeginDeferWindowPos
UnregisterClassW
MoveWindow
GetWindowDC
GetWindow
PeekMessageW
CharNextW
GetSystemMenu
LoadMenuW
UnhookWindowsHookEx
SetWindowPos
DrawEdge
CreateCaret
SetCursor
EqualRect
SetTimer
EmptyClipboard
SetWindowsHookExW
DialogBoxParamW
SetFocus
wvsprintfW
CopyRect
BeginPaint
RemoveMenu
FindWindowW
CallNextHookEx
EnableMenuItem
GetParent
GetDlgItemInt
MessageBeep
OpenClipboard
RedrawWindow
LoadAcceleratorsW
UpdateWindow
GetWindowRect
FrameRect
SetMenuItemInfoW
GetSubMenu
GetFocus
GetMenuDefaultItem
IsWindowVisible
PtInRect
LoadIconW
SetScrollPos
LoadStringW
MessageBoxW
IsWindowEnabled
GetMessageW
GetMenu
DrawFrameControl
ReleaseCapture
GetKeyState
IsChild
TranslateAcceleratorW
GetClassLongW
BringWindowToTop
SetWindowTextW
DragDetect
CreateWindowExW

gdi32

MoveToEx
LPtoDP
CreateSolidBrush
SetPolyFillMode
CreateCompatibleDC
Polyline
SetTextColor
DeleteDC
RealizePalette
SaveDC
GetViewportOrgEx
GetDeviceCaps
DeleteObject
IntersectClipRect
GetTextMetricsW
LineTo
GetClipBox
CreateFontW
BitBlt
PatBlt
SetViewportOrgEx
Rectangle
TextOutW
DPtoLP
CreateDIBSection
SetWindowOrgEx
ExtTextOutW
SelectPalette
SetBkColor
SelectObject
SetBkMode
CreatePalette
RestoreDC
GetClipRgn
GetObjectW
CreateRectRgn
CreateFontIndirectW
SelectClipRgn
GetTextExtentPointW
SetBrushOrgEx
CreateCompatibleBitmap
CreatePatternBrush
CreateBitmap
GetTextExtentPoint32W
GetStockObject
CreatePen
Polygon

comdlg32

GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
ChooseFontW

oleaut32

VarDecCmp
VarDecFromStr
SysFreeString
VarUI4FromStr
VarI4FromStr
VarR8FromStr
SystemTimeToVariantTime

msvcrt

_XcptFilter
__p__fmode
fclose
_acmdln
fopen
exit
atol
__CxxFrameHandler
rand
__set_app_type
time
_purecall
fwrite
strncmp
_strnicmp
__p__commode
_ftol
localtime
_stricmp
_setmbcp
_except_handler3
_initterm
_i64toa
wcslen
memmove
__setusermatherr
atoi
sprintf
_onexit
__dllonexit
_adjust_fdiv
_controlfp
_exit
__getmainargs
strchr

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35181f3664c2f4161141bf95f2dd3930

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

msvcrt

Sections

.text Size: 91KB - Virtual size: 90KB

.data Size: 38KB - Virtual size: 71KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 91KB - Virtual size: 90KB

.data
Size: 38KB - Virtual size: 71KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB