97aa7ba14efb44ce08e9f5067cf64636323f9fb8bb67610d81f041e39c3edf19

Sharing

Copy URL Twitter E-mail

General

Target

97aa7ba14efb44ce08e9f5067cf64636323f9fb8bb67610d81f041e39c3edf19
Size

234KB
MD5

67e7312658d19117ad052093dba38885
SHA1

03a8d0a417e6e2ac7f5ae53b45146778dacbffaa
SHA256

97aa7ba14efb44ce08e9f5067cf64636323f9fb8bb67610d81f041e39c3edf19
SHA512

061e43e1c031c566d930105ee6671ee9c8aa20d8089ab926ad9d8d5afbe91194ebfa7b8cca8ac04c3c4af9d7c3219819274ef9fe3feefd1119f5612acc4ec250
SSDEEP

6144:qTrVoOo+VArkZdwdwL3NdcrN4/BKDR7KjXtlmL0Dz:qTr6x+JyodoN4odKQ0Dz

Score

N/A

Malware Config

Signatures

Files

97aa7ba14efb44ce08e9f5067cf64636323f9fb8bb67610d81f041e39c3edf19
.exe windows x86

af3a442c3ee6f6a77cb2c983913febe6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
HeapFree
InterlockedDecrement
FreeEnvironmentStringsW
SetLastError
InterlockedIncrement
TlsFree
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetACP
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LockResource
LoadLibraryA
GetFileSize
GetProcAddress
ReadFile
GetPrivateProfileStringW
LoadResource
SetEndOfFile
FreeResource
FindResourceA
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
HeapCreate
GetModuleFileNameW
GetStdHandle
HeapAlloc
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
IsProcessorFeaturePresent

user32

CloseClipboard
DestroyAcceleratorTable
GetSystemMenu
SetActiveWindow
GetMenuItemID
IsZoomed
GetSubMenu
GetFocus
IsClipboardFormatAvailable
GetParent
SetParent
FindWindowW
SetFocus
ModifyMenuW
GetMenu
SetRect
CreateAcceleratorTableA
ReleaseDC
EmptyClipboard
GetMenuState
LoadAcceleratorsA
SetMenu
GetActiveWindow
GetMenuItemCount
RemoveMenu
SetMenuDefaultItem
InsertMenuW
OpenClipboard
AdjustWindowRectEx
MessageBoxW
LoadImageA
SetClipboardData
FindWindowA
CopyRect
GrayStringA

gdi32

RectVisible
GetBitmapBits
SetBitmapBits
SetViewportOrgEx
CreateDIBSection
GetDIBits
ResetDCA
CreateRectRgnIndirect
RectInRegion
Rectangle
SetDIBits
ScaleViewportExtEx
GetBkColor
SetViewportExtEx
CreateDIBitmap
GetStockObject
OffsetViewportOrgEx
GetTextColor
RestoreDC

advapi32

RegDeleteValueW
GetSecurityDescriptorDacl
AdjustTokenPrivileges
RegEnumKeyExW
RegOpenKeyA
FreeSid
RegEnumValueW
AllocateAndInitializeSid
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegDeleteKeyW
InitializeSecurityDescriptor
RegQueryInfoKeyW
EqualSid
RegEnumKeyW
GetTokenInformation
OpenThreadToken
OpenProcessToken

shell32

ShellAboutA
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteExW
Shell_NotifyIconW
SHGetDesktopFolder

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af3a442c3ee6f6a77cb2c983913febe6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 30KB - Virtual size: 30KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 188KB - Virtual size: 188KB

.text
Size: 30KB - Virtual size: 30KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 188KB - Virtual size: 188KB