c23d0bcfd11584dae76cc27afdb36b7fe2d7a5588da3b553f45d3fc633d6595e

Sharing

Copy URL Twitter E-mail

General

Target

c23d0bcfd11584dae76cc27afdb36b7fe2d7a5588da3b553f45d3fc633d6595e
Size

260KB
MD5

793532166b4aac3fbcaa46b58e08b7d4
SHA1

a3d7e32755f01b2c64a539bc1c3fc13bd9427877
SHA256

c23d0bcfd11584dae76cc27afdb36b7fe2d7a5588da3b553f45d3fc633d6595e
SHA512

93dc49741026383e3411afb5b311daa10d91038c10e89973b6f16f2e8265c0925c3e33bca3ca04f6a756b95bc68c29bb5ccfcd1d3245fd2533c7a628c8a34ec3
SSDEEP

6144:CDppAKk660Q+W/8x26YdTVw2zg6I4Y99uqr0keM9bLl0C:KFk30PWE6TVwR6RY99hXdLl/

Score

N/A

Malware Config

Signatures

Files

c23d0bcfd11584dae76cc27afdb36b7fe2d7a5588da3b553f45d3fc633d6595e
.exe windows x86

1d0c571832e09264e4c7f11d069be446

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
CreateMutexW
GetProcAddress

user32

GetSystemMetrics
GetActiveWindow
LoadMenuW
CreateDialogParamA
CreatePopupMenu
GetFocus
GetCapture
RegisterClassA
CharUpperW
EndDialog
GetMenuItemInfoA
RemoveMenu
WinHelpW
PostMessageW
mouse_event
ShowWindow
PeekMessageW
LoadCursorW
SendDlgItemMessageW
SetForegroundWindow
GetAsyncKeyState
GetClassInfoExA
MessageBeep
GetDesktopWindow

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW

polstore

IPSecFreePolStr
IPSecFreeMulPolicyData
IPSecDeletePolicyData
IPSecFreeMulISAKMPData
IPSecCreateISAKMPData
IPSecUnassignPolicy

gdi32

GetEnhMetaFileA
CreateFontIndirectW
GetEnhMetaFilePixelFormat
CreateColorSpaceA
CreateFontA
ExtCreateRegion
CreateMetaFileW

activeds

AdsTypeToPropVariant2
ADsDecodeBinaryData
ADsBuildVarArrayInt
ReallocADsMem

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.heSD
Size: 4KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cbn
Size: 2KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 92KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 126KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.n
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d0c571832e09264e4c7f11d069be446

Headers

File Characteristics

Imports

kernel32

user32

advapi32

polstore

gdi32

activeds

Sections

.text Size: 8KB - Virtual size: 7KB

.heSD Size: 4KB - Virtual size: 777KB

.text Size: 13KB - Virtual size: 13KB

.cbn Size: 2KB - Virtual size: 292KB

.rdata Size: 2KB - Virtual size: 28KB

.edata Size: 92KB - Virtual size: 160KB

.data Size: 8KB - Virtual size: 74KB

.edata Size: 126KB - Virtual size: 187KB

.n Size: 512B - Virtual size: 76KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 7KB

.heSD
Size: 4KB - Virtual size: 777KB

.text
Size: 13KB - Virtual size: 13KB

.cbn
Size: 2KB - Virtual size: 292KB

.rdata
Size: 2KB - Virtual size: 28KB

.edata
Size: 92KB - Virtual size: 160KB

.data
Size: 8KB - Virtual size: 74KB

.edata
Size: 126KB - Virtual size: 187KB

.n
Size: 512B - Virtual size: 76KB

.rsrc
Size: 2KB - Virtual size: 2KB