c459969941abc36944f19b0f5294ea6749492a9214a72a2ddc1a2a99a47897a3

Sharing

Copy URL Twitter E-mail

General

Target

c459969941abc36944f19b0f5294ea6749492a9214a72a2ddc1a2a99a47897a3
Size

721KB
MD5

c302a8201617796314d793b17f5728b0
SHA1

2b94eedb1f3a181da0650771ba448236bcbc047f
SHA256

c459969941abc36944f19b0f5294ea6749492a9214a72a2ddc1a2a99a47897a3
SHA512

99d02783850f2b7e0eef40c00ac23313b41881a4fe755ca559da7759b4a8230a2e2489f59de556de24153f3702d1b7e2f85c1eebe9543b3fae778e6c691ea15d
SSDEEP

12288:aKuysfYcyvvvvoZRR8+lSHPXbuLaQtmvLp41EjXH9THXjFKn5W1zwzBbx:aKuovvvvJZPru16uSD9T3weM9

Score

N/A

Malware Config

Signatures

Files

c459969941abc36944f19b0f5294ea6749492a9214a72a2ddc1a2a99a47897a3
.exe windows x86

e5e9f01fa1c2794857fea56db7e2050b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
DeleteDC
SetTextColor
CreateCompatibleDC

oleaut32

VariantClear
SysFreeString
VariantInit
SysStringLen

user32

PeekMessageA
GetDC
GetCursorPos
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
LoadStringA
EnableMenuItem
GetWindowLongA
CreateWindowExA
EndPaint
SetFocus
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
IsWindow
SetWindowLongA
EndDialog
SetWindowTextA
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
TrackPopupMenu
GetDesktopWindow
MessageBoxA
GetSysColor
SystemParametersInfoA
InvalidateRect
SendMessageA
GetClientRect
CallWindowProcA
GetFocus
ReleaseDC
SetCursor
SetWindowPos
PostQuitMessage
SetForegroundWindow
ReleaseCapture

kernel32

GetStdHandle
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
FindNextFileA
HeapDestroy
HeapFree
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
GetConsoleOutputCP
FreeEnvironmentStringsW
HeapSize
SetStdHandle
GetTempPathA
GetCPInfo
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetOEMCP
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
GlobalLock
FindClose
TlsGetValue
FormatMessageA
SetLastError
InterlockedDecrement
GetModuleFileNameW
IsDebuggerPresent
FlushFileBuffers
GetCurrentThreadId
GetCommandLineA
GetCurrentThread
GetCurrentProcessId
GetTickCount
GetModuleHandleA
GetVersion
ExitProcess
GetLastError
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
VirtualFree
HeapCreate
CreateProcessA
SizeofResource
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
InterlockedCompareExchange
lstrlenW
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
Sleep
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryA
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
ExpandEnvironmentStringsA
FindFirstFileW
ResetEvent
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
WaitForMultipleObjects
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
lstrcmpiW
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
GetProcAddress
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
LeaveCriticalSection
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA

advapi32

RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyA

version

GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 675KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5e9f01fa1c2794857fea56db7e2050b

Headers

File Characteristics

Imports

gdi32

oleaut32

user32

kernel32

advapi32

version

Sections

.text Size: 675KB - Virtual size: 1001KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 19KB - Virtual size: 18KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 675KB - Virtual size: 1001KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 18KB - Virtual size: 18KB