566fcf43b426040dd9a07f0cb054b5295fd9dc150734ade838f9914bc1d9bca7

Sharing

Copy URL Twitter E-mail

General

Target

566fcf43b426040dd9a07f0cb054b5295fd9dc150734ade838f9914bc1d9bca7
Size

165KB
MD5

0b8374e3cf6a68bbc4ca205cd1bff150
SHA1

8c8c3b487acebab470c9bbaeb02383de349e7817
SHA256

566fcf43b426040dd9a07f0cb054b5295fd9dc150734ade838f9914bc1d9bca7
SHA512

42ae88ce1742a3301ad5ea59b074306987b557b3ccbc10935e8ba0c44fa28fa805bf6821a6d6bc1f3fbd92da5208464d71c5370b7b7ed482153d049f5fd22e9c
SSDEEP

3072:DlQquYSizDWllQ5HJGWMCsowihNoojKV1hRqvsaYZhIlk82JM0:DlQquzAHouwIH27qvsaYZWy

Score

N/A

Malware Config

Signatures

Files

566fcf43b426040dd9a07f0cb054b5295fd9dc150734ade838f9914bc1d9bca7
.exe windows x86

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeTypeEx
VariantCopyInd

ole32

IsEqualGUID

advapi32

RegOpenKeyA
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
AdjustTokenPrivileges

user32

DestroyMenu
LoadStringA
DefMDIChildProcA
GetFocus
SetScrollInfo
IsWindowEnabled
CreateIcon
ExitWindowsEx
SetWindowLongA
GetKeyNameTextA
TranslateMessage
MapVirtualKeyA
GetMenu
SetActiveWindow
GetWindow
SendMessageA
DefFrameProcA
IntersectRect
LoadBitmapA
GetWindowTextA
CreateWindowExA
GetWindowLongA
PeekMessageA
KillTimer
DrawFrameControl
CreatePopupMenu
RemoveMenu
GetDesktopWindow
IsRectEmpty
GetMenuItemID
LoadIconA
PtInRect
GetLastActivePopup
ScrollWindow
DrawTextA
WindowFromPoint
GetActiveWindow
GetKeyboardState
InvalidateRect
EqualRect
GetTopWindow
CallWindowProcA
UpdateWindow
RedrawWindow
SetClassLongA
IsWindow
SetWindowPos
ClientToScreen
CheckMenuItem
GetWindowRect
GetMenuItemInfoA
GetMenuStringA
DrawIconEx
RegisterClipboardFormatA
GetCursor
GetPropA
SetScrollRange
IsZoomed
GetClipboardData
DrawIcon
GetCursorPos
GetDCEx
RegisterClassA
CharNextA
GetKeyState
SetMenu
SetCursor
LoadCursorA
SetMenuItemInfoA
UnregisterClassA
IsDialogMessageA
FindWindowA
EndPaint
BeginPaint
wsprintfA
AdjustWindowRectEx
GetForegroundWindow
CreateMenu
UnhookWindowsHookEx
DestroyWindow
SetWindowPlacement
IsIconic
SetScrollPos
MessageBoxA
TranslateMDISysAccel
GetWindowPlacement
DispatchMessageA
GetWindowDC
GetClassInfoA
EnableMenuItem
MapWindowPoints
GetWindowThreadProcessId
ScreenToClient
FillRect
TrackPopupMenu
SetCapture
DeleteMenu
DrawEdge
ShowOwnedPopups
SetPropA
EnumWindows
GetSystemMetrics
SetRect
GetMenuItemCount
GetMenuState
IsWindowVisible
InflateRect
CharLowerBuffA
ShowCursor
GetScrollRange
ShowWindow
SetWindowsHookExA
DestroyIcon
CallNextHookEx
GetCapture
GetIconInfo
WinHelpA
GetDC
GetScrollPos
PostQuitMessage
GetKeyboardLayoutList
InsertMenuA
OffsetRect
LoadKeyboardLayoutA
IsChild
DestroyCursor
PostMessageA
OemToCharA
CharLowerA
GetScrollInfo
SetForegroundWindow
GetClientRect
ActivateKeyboardLayout
InsertMenuItemA
EnumThreadWindows
SetTimer
FrameRect
SetFocus
SystemParametersInfoA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardLayout
ReleaseCapture
GetSystemMenu
EnableWindow
GetSubMenu
EnableScrollBar
GetSysColor
ReleaseDC
DrawMenuBar
GetKeyboardType
RemovePropA
ShowScrollBar
WaitMessage

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetCPInfo
GetLocalTime
GetPrivateProfileStringA
GetStringTypeW
EnterCriticalSection
FreeLibrary
lstrcpynA
GetTickCount
GetThreadLocale
Sleep
CompareStringA
RtlUnwind
WriteFile
GetVersionExA
GetStdHandle
GetCurrentProcessId
CreateFileA
SetLastError
InitializeCriticalSection
GetModuleHandleA
LockResource
GetVersion
lstrcmpA
HeapAlloc
WinExec
EnumCalendarInfoA
GetLocaleInfoA
GetCurrentProcess
GlobalLock
GlobalUnlock
lstrcpyA
GetProcAddress
TlsSetValue
TlsGetValue
GetWindowsDirectoryA
LocalFree
SetEndOfFile
FindClose
GlobalReAlloc
TlsFree
TlsAlloc
GetFileType
GetProcessHeap
GetACP
WaitForSingleObject
GetModuleFileNameA
lstrlenA
LoadLibraryExA
InterlockedIncrement
LoadLibraryA
GlobalAlloc
LocalAlloc
SetFilePointer
CreateEventA
VirtualQuery
SizeofResource
ReadFile
SetConsoleCtrlHandler
GetFileSize
SetErrorMode
FreeResource
GetCommandLineA
VirtualAlloc
SetEvent
GlobalFree
GlobalDeleteAtom
GetDiskFreeSpaceA
FormatMessageA
DeleteFileA
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
HeapFree
ExitProcess
SetHandleCount
GetStartupInfoA
RaiseException
FindResourceA
GetEnvironmentStringsA
CreateThread
GlobalAddAtomA
GetSystemDirectoryA
GetSystemInfo
MulDiv
LeaveCriticalSection
FindFirstFileA
GetOEMCP
DeleteCriticalSection
CloseHandle
VirtualFree
MultiByteToWideChar
GetLastError
GlobalHandle
LoadResource
InterlockedDecrement
SetThreadLocale

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

Imports

oleaut32

ole32

advapi32

user32

version

kernel32

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB