a53242946c583d01097cfc06c31b8fcfa43048704600e3f8109480dff4aeac21

Sharing

Copy URL Twitter E-mail

General

Target

a53242946c583d01097cfc06c31b8fcfa43048704600e3f8109480dff4aeac21
Size

173KB
MD5

c6626dbb6d8f1ca17ee1878e60c091f9
SHA1

5cdd27f11fe35350e85cbbd0ad86501a3540608b
SHA256

a53242946c583d01097cfc06c31b8fcfa43048704600e3f8109480dff4aeac21
SHA512

5311052274186c15ed4c78333c5aebb19d04d6516f9d131c9341fc37e5dc8d2560191a12077b50ac91465c8b66433952414f8d1e3414c51e4736bcf7e07c6997
SSDEEP

3072:KeF7Dpd7BzkiXI+wl9N/iqAx9xbWl/3u88Zw8WUL65+V3ZsXngA:KeFnpXzkCwbZ/3P8RLWe3uXnd

Score

N/A

Malware Config

Signatures

Files

a53242946c583d01097cfc06c31b8fcfa43048704600e3f8109480dff4aeac21
.exe windows x86

43e491e22c0bcf8928d3ef5dd5ad6938

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptEncrypt
CryptImportKey
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegOpenKeyExA
CryptCreateHash
RegQueryValueExA
RegEnumValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteValueA
CryptDestroyKey
CryptAcquireContextA
RegSetValueExA
CryptReleaseContext
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA

winmm

timeGetTime
timeSetEvent

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueW
VerQueryValueA

gdi32

GetStockObject
BitBlt
CreateDIBitmap
StretchDIBits
GetObjectA
GetDIBits
CreateCompatibleBitmap
RealizePalette
GetDeviceCaps
SelectPalette
ExtEscape
CreateFontA
SetStretchBltMode
DeleteObject
CreateCompatibleDC
DeleteDC
CreateDIBSection
SelectObject
CreateSolidBrush
SetBkMode

gdiplus

GdipFree
GdipAlloc
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipDisposeImage
GdipCreateBitmapFromFileICM
GdipCloneImage

ole32

OleLockRunning
OleInitialize
CoUninitialize
CreateStreamOnHGlobal
StgIsStorageFile
StringFromGUID2
CoTaskMemFree
OleUninitialize
CoGetClassObject
CoInitialize
StgOpenStorage
CoTaskMemRealloc
CoInitializeSecurity
CoSetProxyBlanket
CreateBindCtx
GetRunningObjectTable
CLSIDFromProgID
CreateItemMoniker
StgCreateDocfile
CoCreateInstance
CoTaskMemAlloc
BindMoniker
CLSIDFromString

user32

IsWindow
GetQueueStatus
GetWindowRect
ReleaseDC
UnregisterClassA
SetWindowLongA
SendMessageTimeoutA
MoveWindow
MsgWaitForMultipleObjects
IsChild
SetRect
SetCapture
CreateWindowExA
CreateAcceleratorTableA
EqualRect
RedrawWindow
ShowWindow
InvalidateRect
wsprintfA
GetWindow
SetTimer
DrawTextA
LoadCursorA
GetWindowTextA
GetActiveWindow
GetDC
GetParent
CreateDialogParamA
DispatchMessageA
EnumDisplayDevicesA
GetDesktopWindow
SendMessageA
GetWindowLongA
InvalidateRgn
ReleaseCapture
GetSysColor
CharNextA
SetFocus
BeginPaint
PostThreadMessageA
KillTimer
GetWindowTextLengthA
FindWindowA
CopyRect
RegisterWindowMessageA
EndPaint
GetClientRect
FillRect
GetClassInfoExA
SetWindowTextA
wvsprintfA
DestroyWindow
SetParent
DestroyAcceleratorTable
PostMessageA
PeekMessageA
SendNotifyMessageA
CallWindowProcA
RegisterClassExA
DefWindowProcA
GetDlgItem
GetClassNameA
GetFocus
SetWindowPos

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

kernel32

WriteFile
DisableThreadLibraryCalls
GetShortPathNameW
GetFileSize
WideCharToMultiByte
LocalAlloc
CreateFileA
GetProcessId
CreateFileW
UnmapViewOfFile
GlobalSize
Sleep
EnumResourceTypesA
LocalFree
GetTickCount
CreateFileMappingA
GetFileAttributesA
GlobalAlloc
SetFilePointer
MapViewOfFile
GlobalFree
ReadFile
CloseHandle

shlwapi

PathFileExistsW
PathCombineW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA

Sections

.text
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43e491e22c0bcf8928d3ef5dd5ad6938

Headers

File Characteristics

Imports

advapi32

winmm

version

gdi32

gdiplus

ole32

user32

wininet

shell32

kernel32

shlwapi

setupapi

Sections

.text Size: 99KB - Virtual size: 98KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 69KB - Virtual size: 69KB

.tls Size: 1024B - Virtual size: 92KB

.text
Size: 99KB - Virtual size: 98KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 69KB - Virtual size: 69KB

.tls
Size: 1024B - Virtual size: 92KB