bda722fb093f8b13d21b663ce767bcabfa1a1340468ad5b986ba6bec9b840aef

Sharing

Copy URL Twitter E-mail

General

Target

bda722fb093f8b13d21b663ce767bcabfa1a1340468ad5b986ba6bec9b840aef
Size

481KB
MD5

1a57dc5d7e200c466940dd57125d34be
SHA1

965b413b71c7a1068f87049338d0a80f2883c0e6
SHA256

bda722fb093f8b13d21b663ce767bcabfa1a1340468ad5b986ba6bec9b840aef
SHA512

d451b5411906ed5f828341793b9624964d3c28c729eb77167f26ff56f77671bac357fb1e8d5f9208f0599bcc269c5de36864533a6cc9df7a4bb195522b913ccf
SSDEEP

12288:cjVsM2f4ECBJR0IHEreHqegrQLNcOHRuc:qs1flC7qIH/q1rc2Oxu

Score

N/A

Malware Config

Signatures

Files

bda722fb093f8b13d21b663ce767bcabfa1a1340468ad5b986ba6bec9b840aef
.exe windows x86

0b1626b18f7698843b002544aa7b5eee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
ReplaceTextA

comctl32

DrawStatusText
ImageList_Add
DrawStatusTextA
ImageList_SetIconSize
CreateToolbar
InitCommonControlsEx
ImageList_DragEnter
ImageList_Destroy
ImageList_SetFlags
ImageList_GetDragImage
GetEffectiveClientRect
ImageList_Duplicate

wininet

FtpOpenFileA
GetUrlCacheHeaderData

shell32

FindExecutableA
ExtractIconW

user32

KillTimer
GetUpdateRgn
CreateWindowExW
GetUpdateRect
GetGuiResources
SetClipboardData
EnumWindowStationsW
DrawAnimatedRects
CreateCursor
MessageBoxW
CallMsgFilterW
SetProcessWindowStation
GetClipboardData
SetWindowsHookA
SetMenu
RegisterClassExA
ShowWindow
RealChildWindowFromPoint
SetShellWindow
SetParent
DefWindowProcA
SetClassWord
RegisterClassA
LoadAcceleratorsW
DestroyWindow

kernel32

GetCurrentProcess
GetStartupInfoW
GetLocalTime
SetHandleCount
SetLastError
InitializeCriticalSection
GetTickCount
SetFilePointer
SetStdHandle
VirtualQuery
VirtualFree
GetStringTypeW
GetCommandLineA
QueryPerformanceCounter
CompareStringA
GetLastError
HeapReAlloc
GetCurrentThread
GetSystemTimeAsFileTime
TlsAlloc
HeapCreate
MultiByteToWideChar
GetModuleFileNameW
GetStartupInfoA
GetCommandLineW
InterlockedDecrement
ExitProcess
ResetEvent
WriteConsoleOutputCharacterA
GetProcAddress
EnterCriticalSection
LCMapStringA
LeaveCriticalSection
ReadFile
GetCurrentProcessId
GetSystemTime
GetFileType
LoadLibraryA
GetStdHandle
TlsFree
SetEnvironmentVariableA
GetCPInfo
GetModuleHandleA
CloseHandle
UnhandledExceptionFilter
CreateMutexA
FlushFileBuffers
DeleteCriticalSection
TlsSetValue
TlsGetValue
IsBadWritePtr
HeapFree
GetCurrentThreadId
WideCharToMultiByte
VirtualAlloc
HeapAlloc
GetModuleFileNameA
FreeEnvironmentStringsW
CompareStringW
OpenMutexA
GetEnvironmentStringsW
TerminateProcess
GetTimeZoneInformation
GetEnvironmentStrings
RtlUnwind
InterlockedExchange
WriteFile
GetStringTypeA
HeapDestroy
FreeEnvironmentStringsA
LCMapStringW
InterlockedIncrement
GetVersion
GetConsoleTitleA

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 201KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b1626b18f7698843b002544aa7b5eee

Headers

File Characteristics

Imports

comdlg32

comctl32

wininet

shell32

user32

kernel32

Sections

.text Size: 149KB - Virtual size: 148KB

.rdata Size: 201KB - Virtual size: 223KB

.data Size: 110KB - Virtual size: 110KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 149KB - Virtual size: 148KB

.rdata
Size: 201KB - Virtual size: 223KB

.data
Size: 110KB - Virtual size: 110KB

.rsrc
Size: 19KB - Virtual size: 19KB