9640ff86cd849e6ec2ca1c372be8748db7601ff6d81b6eef4e9c31d0030fc18a

Sharing

Copy URL Twitter E-mail

General

Target

9640ff86cd849e6ec2ca1c372be8748db7601ff6d81b6eef4e9c31d0030fc18a
Size

721KB
MD5

df50ae69d101fa8a0283068bc3520f13
SHA1

705ccc87a32b03796d4b45695a402027610c483a
SHA256

9640ff86cd849e6ec2ca1c372be8748db7601ff6d81b6eef4e9c31d0030fc18a
SHA512

a42da8ce40fed9b6b9d9710bfddb913805b303c90395686c6513bda8e4f219cae0156ca00e659d84c269a01c3592bbf63b7d54d7b45a3fa2b04bc1ffd6ace065
SSDEEP

12288:aKuysfYcyvvvvoZRR8+lSHPXbuLaQtmvLp41EjXH9THXjFKn5W1zwzBJ:aKuovvvvJZPru16uSD9T3weMJ

Score

N/A

Malware Config

Signatures

Files

9640ff86cd849e6ec2ca1c372be8748db7601ff6d81b6eef4e9c31d0030fc18a
.exe windows x86

e5e9f01fa1c2794857fea56db7e2050b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
DeleteDC
SetTextColor
CreateCompatibleDC

oleaut32

VariantClear
SysFreeString
VariantInit
SysStringLen

user32

PeekMessageA
GetDC
GetCursorPos
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
LoadStringA
EnableMenuItem
GetWindowLongA
CreateWindowExA
EndPaint
SetFocus
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
IsWindow
SetWindowLongA
EndDialog
SetWindowTextA
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
TrackPopupMenu
GetDesktopWindow
MessageBoxA
GetSysColor
SystemParametersInfoA
InvalidateRect
SendMessageA
GetClientRect
CallWindowProcA
GetFocus
ReleaseDC
SetCursor
SetWindowPos
PostQuitMessage
SetForegroundWindow
ReleaseCapture

kernel32

GetStdHandle
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
FindNextFileA
HeapDestroy
HeapFree
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
GetConsoleOutputCP
FreeEnvironmentStringsW
HeapSize
SetStdHandle
GetTempPathA
GetCPInfo
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetOEMCP
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
GlobalLock
FindClose
TlsGetValue
FormatMessageA
SetLastError
InterlockedDecrement
GetModuleFileNameW
IsDebuggerPresent
FlushFileBuffers
GetCurrentThreadId
GetCommandLineA
GetCurrentThread
GetCurrentProcessId
GetTickCount
GetModuleHandleA
GetVersion
ExitProcess
GetLastError
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
VirtualFree
HeapCreate
CreateProcessA
SizeofResource
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
InterlockedCompareExchange
lstrlenW
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
Sleep
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryA
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
ExpandEnvironmentStringsA
FindFirstFileW
ResetEvent
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
WaitForMultipleObjects
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
lstrcmpiW
GetVersionExA
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
GetProcAddress
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
SetUnhandledExceptionFilter
CreateThread
LeaveCriticalSection
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA

advapi32

RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyA

version

GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 675KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5e9f01fa1c2794857fea56db7e2050b

Headers

File Characteristics

Imports

gdi32

oleaut32

user32

kernel32

advapi32

version

Sections

.text Size: 675KB - Virtual size: 1001KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 19KB - Virtual size: 18KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 675KB - Virtual size: 1001KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 18KB - Virtual size: 18KB