cb707b3c59693e844283c0d6a8000625cbf9c8b0abdb9822aedc41bb4eff66e9

Sharing

Copy URL Twitter E-mail

General

Target

cb707b3c59693e844283c0d6a8000625cbf9c8b0abdb9822aedc41bb4eff66e9
Size

281KB
MD5

9b0e2fd3519eac46565646857a2426be
SHA1

a6e9203aaaffa0b4a8cf470a6d948c9561cb23f9
SHA256

cb707b3c59693e844283c0d6a8000625cbf9c8b0abdb9822aedc41bb4eff66e9
SHA512

9ddf8d96ed2b482503a8e08975ba78036a3018aaa165005221c3ab3824b3d11c48346e4eb84706d9a04eb3413fa696807e4be5a169f847dcdff52a8e17f2e5d7
SSDEEP

6144:8dTaa1zeXlkDwb23rcKGoqQR0Tb0KF9iDtLBgbk:8dWa1zeXlKwb23rcnqQbxF4DtL

Score

N/A

Malware Config

Signatures

Files

cb707b3c59693e844283c0d6a8000625cbf9c8b0abdb9822aedc41bb4eff66e9
.exe windows x86

641309dfa7ce2a7b32a27d1c63d57ec7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime
EndDeferWindowPos
ExitWindowsEx
IntersectRect
SetForegroundWindow
CheckRadioButton
SetFocus
RegisterClassExA
GetKeyNameTextA
GetWindowTextLengthA
GetClassInfoExA
CallWindowProcA
GetWindowLongA
GetCursorPos
GetFocus
AppendMenuA
SetClipboardData
DestroyWindow
SendMessageA
GetClipboardData
SendDlgItemMessageA
InflateRect

gdi32

TextOutA
Escape
CreatePatternBrush
CreateSolidBrush
GetBkColor
RectVisible

ole32

CoRegisterClassObject
CoRegisterSurrogate
CoInitialize
OleUninitialize
OleInitialize

shlwapi

SHDeleteKeyA
PathFindFileNameA
SHRegCloseUSKey
PathQuoteSpacesA
SHRegCreateUSKeyA
SHRegWriteUSValueA

kernel32

LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
GetStringTypeW
GetOEMCP
GetACP
GetCPInfo
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapAlloc
Sleep
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetCurrentThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
lstrcmpA
lstrcmpiA
QueryPerformanceCounter
GetWindowsDirectoryA
GetSystemTime
OpenProcess
GetVersionExA
GetModuleHandleA
GetDateFormatA
SizeofResource
LoadResource
CreateEventA
FileTimeToSystemTime
GetVersion
GetVolumeInformationA
CloseHandle
ReadFile
GetFileSize
SetEndOfFile
CreateFileA
DeleteCriticalSection
TlsGetValue
TlsAlloc
GetSystemInfo
ExpandEnvironmentStringsA
GetProfileStringW
VirtualProtect
AddAtomA
GetCommandLineA
HeapSetInformation
GetLastError
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
SetFilePointer
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
TlsSetValue
TlsFree
InterlockedIncrement

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

641309dfa7ce2a7b32a27d1c63d57ec7

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

ole32

shlwapi

kernel32

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 80KB - Virtual size: 413KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 80KB - Virtual size: 413KB