125418f8c06be98f3cad80eb3678f597af719cbc1ab366d96313d36abafa389c

Sharing

Copy URL

Twitter E-mail

General

Target

125418f8c06be98f3cad80eb3678f597af719cbc1ab366d96313d36abafa389c
Size

132KB
MD5

a439d22d3adf43f1e7c28c52afe579b5
SHA1

5a79bad84547b8efbe2835694bf729ae532e8be9
SHA256

125418f8c06be98f3cad80eb3678f597af719cbc1ab366d96313d36abafa389c
SHA512

087bccc5e9fd74506c9bd6785da0e95e36b8c0bf5a27d540b22591397c74db27151bf94e5f438d2c7929ab2ede2fca2202576877e4379974c5d4ec31d44e6d85
SSDEEP

3072:uz6/KkEfIN3CWZz+RRdtjhFHJSJjEuN/a8nfJKR4dW0pVMRmDd18mFZJEDHO5YdM:U6tEg9DZit9aoW/ame4dJMRmbJEDHO

Score

N/A

Malware Config

Signatures

Files

125418f8c06be98f3cad80eb3678f597af719cbc1ab366d96313d36abafa389c
.exe windows x86

0e2c8d97850007fb3e8155f46e15955f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
TlsAlloc
SizeofResource
GetCurrentProcess
GlobalSize
IsValidLocale
GetFileSize
GetTempPathW
GetConsoleCP
FormatMessageW
GetStringTypeA
LocalAlloc
WaitForMultipleObjects
GetStringTypeW
IsProcessorFeaturePresent
lstrcmpW
GetDateFormatA
GetEnvironmentStringsW
LeaveCriticalSection
GetModuleFileNameA
TlsFree
VirtualAlloc
lstrcatW
WideCharToMultiByte
FindFirstChangeNotificationW
GetConsoleMode
RtlUnwind
GetStdHandle
ReadFile
LoadLibraryW
lstrlenA
InterlockedExchange
SetLastError
GetPrivateProfileStringW
GetStartupInfoA
DebugBreak
GetProcessHeap
GetProcAddress
GetLastError
GetModuleHandleA
GetConsoleOutputCP
UnhandledExceptionFilter
GlobalAlloc
GetVersion
GetTimeFormatA
MultiByteToWideChar
RaiseException
SetConsoleCtrlHandler
GetWindowsDirectoryW
LCMapStringW
CompareStringA
GetTempFileNameW
WinExec
VerLanguageNameW
lstrlenW
EnterCriticalSection
Sleep
GetCurrentThreadId
GlobalLock
TlsGetValue
GetSystemDirectoryW
SystemTimeToTzSpecificLocalTime
HeapDestroy
CreateFileW
InitializeCriticalSectionAndSpinCount
LocalFree
ExpandEnvironmentStringsW
GetACP
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
WriteConsoleA
GetLocaleInfoA
GetCPInfo
GetFileAttributesW
GetLocaleInfoW
LCMapStringA
OutputDebugStringW
VirtualQuery
FindResourceW
IsDebuggerPresent
FlushInstructionCache
CreateThread
VirtualFree
GetModuleFileNameW
GetOEMCP
InitializeCriticalSection
ResetEvent
GlobalUnlock
OpenEventW
InterlockedCompareExchange
lstrcpynA
GetCommandLineW
WritePrivateProfileSectionW
HeapSize
SetUnhandledExceptionFilter
LoadLibraryA
lstrcpyW
InterlockedIncrement
WritePrivateProfileStringW
ExitProcess
GetFileAttributesExW
CompareStringW
GetCurrentThread
CloseHandle
HeapReAlloc
IsValidCodePage
SetHandleCount
CopyFileW
LockResource
DeleteCriticalSection
MulDiv
SetEvent
HeapFree
GetUserDefaultLCID
FreeEnvironmentStringsW
WaitForSingleObject
FreeLibrary
lstrcmpiW
TerminateProcess
InterlockedDecrement
HeapCreate
FatalAppExitA
HeapAlloc
CreateFileA
GetDateFormatW
EnumSystemLocalesA
GetFileType
lstrcpynW
GetComputerNameW
LoadLibraryExW
FindNextChangeNotification
ExpandEnvironmentStringsA
FileTimeToSystemTime
GetModuleHandleW
WriteConsoleW
LoadResource
SetStdHandle
GetSystemDefaultLangID
GetVersionExW
TlsSetValue

user32

RegisterClipboardFormatW
SendMessageW
DialogBoxParamW
GetWindow
DrawIconEx
EndDeferWindowPos
GetDlgItemInt
GetFocus
IsWindow
MapWindowPoints
SetDlgItemTextW
GetSystemMenu
GetDlgCtrlID
GetWindowLongW
CreatePopupMenu
DeferWindowPos
PostQuitMessage
EndPaint
ShowScrollBar
SetWindowPos
SetParent
GetMenuDefaultItem
GetMenuItemCount
SetDlgItemInt
DestroyWindow
GetClientRect
UnhookWindowsHookEx
CloseClipboard
BringWindowToTop
RegisterClassW
ScrollWindowEx
LoadMenuW
FindWindowW
MonitorFromWindow
IsChild
ScreenToClient
OffsetRect
DrawTextW
GetDlgItemTextW
GetMenuItemInfoW
DestroyCaret
SetWindowPlacement
GetDesktopWindow
OpenClipboard
AdjustWindowRectEx
LoadStringA
AppendMenuW
BeginDeferWindowPos
GetActiveWindow
LockWindowUpdate
MessageBeep
RemoveMenu
FillRect
GetParent
ShowCaret
SetWindowLongA
RegisterClassExW
EmptyClipboard
GetMenuStringW
GetMenu
TranslateMDISysAccel
GetClassInfoExW
CreateWindowExW
EnableWindow
DrawEdge
WindowFromPoint
GetSysColorBrush
SetMenuDefaultItem
LoadIconW
GetSubMenu
CharNextW
SetMenu
CreateCaret
SetCaretPos
LoadBitmapW
IsClipboardFormatAvailable
GetDlgItem
InflateRect
GetDoubleClickTime
DefWindowProcW
DestroyMenu
GetCapture
TrackPopupMenuEx
GetClassLongW
EndDialog
GetMessageW
PostMessageW
GetMessagePos
CallNextHookEx
GetWindowThreadProcessId
IsWindowEnabled
SetWindowTextW
SetCapture
BeginPaint
SetScrollPos
RedrawWindow
DefMDIChildProcW
GetDC
MessageBoxW
PtInRect
SetScrollInfo
DrawFocusRect
GetWindowDC
CharLowerW
EqualRect
UnregisterClassA
PeekMessageW
ReleaseCapture
DrawFrameControl
SetRectEmpty
TranslateAcceleratorW
KillTimer
GetWindowTextLengthW
IsWindowVisible
wvsprintfW
GetSystemMetrics
FrameRect
GetWindowPlacement
ClientToScreen
SystemParametersInfoW
SetTimer
SetMenuItemInfoW
GetMonitorInfoW
CallWindowProcW
SetFocus
SetForegroundWindow
GetCursorPos
SetClipboardData
DefFrameProcW
GetClassNameW
ReleaseDC
DispatchMessageW
RegisterWindowMessageW
SetCursor
LoadImageW
UnregisterClassW
SetWindowsHookExW
LoadStringW
SetWindowLongW
TrackPopupMenu
GetMenuItemID
MoveWindow
LoadAcceleratorsW
GetKeyState
DragDetect
IntersectRect
EnableMenuItem
InvalidateRect
IsMenu
DrawMenuBar
LoadCursorW
GetScrollInfo
UpdateWindow
InsertMenuW
TranslateMessage
GetClassInfoW
GetWindowTextW
GetWindowRect
ShowWindow
ModifyMenuW
CopyRect

gdi32

SaveDC
CreateDIBSection
CreateBitmap
Polyline
SetPolyFillMode
CreateCompatibleBitmap
RestoreDC
DeleteObject
GetClipRgn
RealizePalette
ExtTextOutW
MoveToEx
CreateRectRgn
GetStockObject
DPtoLP
SelectPalette
CreatePatternBrush
LPtoDP
SetBrushOrgEx
TextOutW
CreateFontIndirectW
SelectObject
LineTo
GetTextMetricsW
SetTextColor
CreateCompatibleDC
GetTextExtentPoint32W
BitBlt
SetBkColor
GetTextExtentPointW
Rectangle
GetViewportOrgEx
Polygon
DeleteDC
CreatePen
CreateFontW
CreateSolidBrush
IntersectClipRect
GetDeviceCaps
SetViewportOrgEx
SelectClipRgn
GetObjectW
GetClipBox
PatBlt
CreatePalette
SetBkMode
SetWindowOrgEx

comdlg32

ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

advapi32

OpenProcessToken
GetUserNameW
RegConnectRegistryW
RegReplaceKeyW
IsTextUnicode
GetLengthSid
RegGetKeySecurity
RegSetKeySecurity
RegDeleteKeyW
GetSecurityDescriptorOwner
RegUnLoadKeyW
GetSecurityDescriptorGroup
RegCreateKeyExW
RegQueryValueExA
GetSecurityDescriptorSacl
RegEnumValueA
RegSetValueExW
RegEnumValueW
GetSidIdentifierAuthority
GetSecurityDescriptorDacl
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
AdjustTokenPrivileges
InitializeAcl
GetSidSubAuthorityCount
RegSaveKeyW
GetSecurityDescriptorControl
GetTokenInformation
RegRestoreKeyW
InitializeSecurityDescriptor
LookupPrivilegeValueW
SetNamedSecurityInfoW
RegQueryInfoKeyW
RegEnumKeyExW
RegLoadKeyW
MapGenericMask
GetNamedSecurityInfoW
CopySid
RegOpenKeyExA
RegCloseKey
GetSidSubAuthority
SetSecurityDescriptorDacl

oleaut32

VarDecCmp
VarDecFromStr
SystemTimeToVariantTime
VarR8FromStr
VarI4FromStr
VarUI4FromStr
SysFreeString

msvcrt

_CIacos

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e2c8d97850007fb3e8155f46e15955f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

msvcrt

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 38KB - Virtual size: 72KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 38KB - Virtual size: 72KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB