a3e2336899f392c35e88c1da395c389998dd4c535deda282a2ac0e2eff99e562

Sharing

Copy URL Twitter E-mail

General

Target

a3e2336899f392c35e88c1da395c389998dd4c535deda282a2ac0e2eff99e562
Size

167KB
MD5

ae19e84022ec62d847f38cd96537f8ef
SHA1

1755a9a264766617687f493133f0f3349f58de51
SHA256

a3e2336899f392c35e88c1da395c389998dd4c535deda282a2ac0e2eff99e562
SHA512

fd712beef9e71d3dee9eadfaaffa335a5ade70550eee1aabc7eb4060e8e3943c2f2939ee4c5fd62c8b6c4a4ba660c4d4ffd9e6405d5a7cf1d1d6af54d52b610a
SSDEEP

3072:w4ZF3nu4vCpgQHzFndHdLDJJUnDtx7NB2tRGeq7qCuGxPNgd:Zn3Pov5dHd/Jex7NeTq7qCueO

Score

N/A

Malware Config

Signatures

Files

a3e2336899f392c35e88c1da395c389998dd4c535deda282a2ac0e2eff99e562
.exe windows x86

4f27eb3ae11c8b6f0950f9815840831a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathCombineW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

ole32

CLSIDFromProgID
CoSetProxyBlanket
StgCreateDocfile
OleLockRunning
GetRunningObjectTable
CoGetClassObject
CreateItemMoniker
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
OleUninitialize
StgOpenStorage
CreateStreamOnHGlobal
OleInitialize
StgIsStorageFile
CoTaskMemFree
CoInitializeSecurity
CoUninitialize
CreateBindCtx
CoInitialize
CoTaskMemRealloc
BindMoniker
CLSIDFromString

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

winmm

timeGetTime
timeSetEvent

user32

DispatchMessageA
GetWindowRect
GetFocus
PostMessageA
GetDC
GetSysColor
LoadCursorA
ReleaseCapture
UnregisterClassA
GetClientRect
DrawTextA
DestroyAcceleratorTable
ReleaseDC
SendMessageTimeoutA
SetCapture
RegisterClassExA
SendNotifyMessageA
SetTimer
MoveWindow
GetQueueStatus
wvsprintfA
MsgWaitForMultipleObjects
InvalidateRect
RegisterWindowMessageA
PeekMessageA
FindWindowA
RedrawWindow
SetWindowLongA
CreateWindowExA
DestroyWindow
BeginPaint
GetParent
EnumDisplayDevicesA
SetWindowTextA
SetParent
CopyRect
GetActiveWindow
IsWindow
CallWindowProcA
GetWindowLongA
GetWindow
GetDesktopWindow
IsChild
EqualRect
ShowWindow
GetWindowTextA
PostThreadMessageA
GetDlgItem
CreateDialogParamA
KillTimer
wsprintfA
SendMessageA
CharNextA
SetFocus
GetClassNameA
InvalidateRgn
EndPaint
GetWindowTextLengthA
GetClassInfoExA
DefWindowProcA
SetRect
CreateAcceleratorTableA
FillRect
SetWindowPos

gdi32

CreateSolidBrush
CreateDIBitmap
CreateCompatibleBitmap
GetObjectA
SelectPalette
DeleteObject
SetStretchBltMode
StretchDIBits
CreateFontA
GetDeviceCaps
BitBlt
CreateDIBSection
GetDIBits
CreateCompatibleDC
RealizePalette
DeleteDC
ExtEscape
SelectObject
GetStockObject
SetBkMode

kernel32

GetShortPathNameW
ReadFile
WideCharToMultiByte
CreateFileMappingA
GlobalAlloc
GetTickCount
DisableThreadLibraryCalls
GetProcessAffinityMask
CreateFileA
GlobalSize
SetFilePointer
WriteFile
EnumResourceTypesW
UnmapViewOfFile
LocalAlloc
GlobalFree
GetFileAttributesA
Sleep
GetFileSize
MapViewOfFile
LocalFree
CreateFileW
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
CryptAcquireContextA
RegQueryInfoKeyA
RegCloseKey
RegEnumValueA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
CryptCreateHash
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptHashData
CryptImportKey
CryptDestroyHash
CryptGetHashParam
RegDeleteValueA
RegDeleteKeyA

gdiplus

GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipCloneImage

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

version

GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f27eb3ae11c8b6f0950f9815840831a

Headers

File Characteristics

Imports

shlwapi

setupapi

ole32

wininet

winmm

user32

gdi32

kernel32

advapi32

gdiplus

shell32

version

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 5KB - Virtual size: 4KB

.bss Size: 63KB - Virtual size: 62KB

.tls Size: 1024B - Virtual size: 96KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 5KB - Virtual size: 4KB

.bss
Size: 63KB - Virtual size: 62KB

.tls
Size: 1024B - Virtual size: 96KB