d1bbe6f5cd6fcab072619b2823f768e11c10016f4a673753f55bf6e357ca8303

Sharing

Copy URL Twitter E-mail

General

Target

d1bbe6f5cd6fcab072619b2823f768e11c10016f4a673753f55bf6e357ca8303
Size

84KB
MD5

4bc84c8e8d9e4a8ad455cc941a00a020
SHA1

bc241d69e4a29861f65eac14afb44ff0df2b7578
SHA256

d1bbe6f5cd6fcab072619b2823f768e11c10016f4a673753f55bf6e357ca8303
SHA512

8d8cf3b4b30e70ea846cd9a0bd07d71eeedd692348ab2658ad18fae7d7de5c1cccc3f8adc70fe6da32ed38202732a26250eaa5b64804f4a0bce82c8beefbeb83
SSDEEP

1536:ZXf7rZNB1ysyJ4Uzewh99ysNbRXzxBkZXzLXkEwG0L/dC03XN5D2:ZRAsyaUzVh+ezxBKLXgG0LFDNJ2

Score

N/A

Malware Config

Signatures

Files

d1bbe6f5cd6fcab072619b2823f768e11c10016f4a673753f55bf6e357ca8303
.exe windows x86

c8cf821145be7a238635fd3d7eb4b896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
wcstoul
swscanf
__getmainargs
__setusermatherr
exit
__set_app_type
__CxxFrameHandler
_initterm
_wtol
_exit
wcschr
_acmdln
_wtoi
_onexit
_controlfp
__dllonexit
_XcptFilter
_purecall
_c_exit

advapi32

RegEnumValueA
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExW
RegEnumKeyA
RegCreateKeyA
RegSetValueExW
RegOpenKeyExA
RegQueryValueExW

kernel32

QueryDosDeviceW
GetProfileIntW
GetStartupInfoA
QueryDosDeviceA
SetProcessPriorityBoost
QueryPerformanceCounter
VirtualAlloc
CreateWaitableTimerW
FindNextFileW
BaseCheckAppcompatCache
DebugActiveProcessStop
FindNextChangeNotification
SetupComm
RtlFillMemory
TerminateProcess
HeapUnlock
EnumResourceLanguagesA
ReadFile
QueryDepthSList
SetLastError
lstrlenW
lstrcmpiW
GetCurrentProcess
lstrcmpW
CancelDeviceWakeupRequest
AddAtomA
SetConsoleMode
SetConsoleIcon
SetLocalTime
WriteProfileStringW
MulDiv
WriteFileGather
AddConsoleAliasW
GetNumberFormatW
GetNumberOfConsoleInputEvents
GetPrivateProfileSectionNamesW
CreateFileW
DeleteVolumeMountPointA
SetProcessWorkingSetSize
GetConsoleAliasExesA
GetLocaleInfoW
SetComputerNameExA
SetThreadIdealProcessor
SetStdHandle
GetLastError
ReleaseMutex
GetVolumePathNamesForVolumeNameA
GetFileSize
LZOpenFileA
SetUnhandledExceptionFilter
GetTickCount
BindIoCompletionCallback
GetVersionExW
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
CloseHandle
GetProcessVersion
GetCommandLineW
DeleteTimerQueueEx
SetThreadUILanguage
LZOpenFileW
GetSystemWindowsDirectoryA
CloseHandle
UnhandledExceptionFilter
GetComputerNameExA
FatalExit
DosPathToSessionPathA
Sleep
LockFile
CreateIoCompletionPort
UnregisterWaitEx
EnumLanguageGroupLocalesA
GetUserDefaultLangID
FillConsoleOutputCharacterW
GetUserDefaultLCID
WriteConsoleW
CreateMutexW
lstrcatW
GetMailslotInfo
ExitProcess
GetCurrentProcessId
lstrcpyW

gdi32

SelectObject
ExtTextOutW
SaveDC
GetTextColor
SetPaletteEntries
GetDeviceCaps
GetNearestPaletteIndex
CreateFontIndirectW
CreateCompatibleBitmap
SetLayout
CreatePalette
RestoreDC
GetStockObject
GetTextMetricsW
SetBkColor
SelectPalette
RealizePalette
SetTextColor
CreateBitmap
TextOutW
PatBlt
GetPaletteEntries
CreateCompatibleDC
BitBlt
Rectangle
GetTextExtentPoint32W
DeleteDC
SetTextAlign
GetNearestColor
DeleteObject
SetBkMode
CreateSolidBrush

user32

SystemParametersInfoW
ShowWindow
GetWindowLongW
LoadIconW
HiliteMenuItem
SetSysColorsTemp
GetWindow
PostMessageW
GetClientRect
SendMessageTimeoutW
LoadImageW
SetWindowTextW
DrawFrameControl
ChangeDisplaySettingsW
SwapMouseButton
GetWindowRect
GetSystemMetrics
EndPaint
SetWindowPos
GetDC
BeginPaint
SendDlgItemMessageW
DefWindowProcW
GetDesktopWindow
GetFocus
SetCaretBlinkTime
SetSysColors
DrawEdge
RegisterClassW
LoadStringW
KillTimer
MessageBoxW
SetDlgItemTextW
GetParent
GetForegroundWindow
InflateRect
GetDlgCtrlID
FindWindowW
wsprintfW
DrawTextW
OffsetRect
SendMessageW
ReleaseDC
EnableWindow
LoadMenuW
DrawCaptionTempW
GetSysColor
InvalidateRect
LoadCursorW
EnumDisplaySettingsW
SetTimer
DestroyIcon
SetFocus
GetTopWindow
MapWindowPoints
SetWindowLongW
FillRect
EnableMenuItem

comctl32

ord17

comdlg32

GetSaveFileNameW

shlwapi

StrTrimW

shell32

ShellExecuteW
ord258

ole32

CoCreateInstance
CoInitialize

uxtheme

GetCurrentThemeName
ord4
ord65
IsThemeActive

atl

AtlAxCreateDialogW
AtlIPersistPropertyBag_Save
AtlModuleRegisterClassObjects
AtlHiMetricToPixel
AtlModuleUpdateRegistryFromResourceD
AtlModuleUnregisterServer
AtlAxDialogBoxA

utildll

IsPartOfDomain
CompareElapsedTime
ConfigureModem
CalculateDiffTime

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.keybF
Size: 1KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i
Size: 3KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nZAYb
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fLhZz
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Y
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8cf821145be7a238635fd3d7eb4b896

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

comdlg32

shlwapi

shell32

ole32

uxtheme

atl

utildll

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 6KB

.keybF Size: 1KB - Virtual size: 36KB

.i Size: 3KB - Virtual size: 24KB

.nZAYb Size: 1KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 22KB

.fLhZz Size: 1KB - Virtual size: 12KB

.p Size: 3KB - Virtual size: 31KB

.Y Size: 2KB - Virtual size: 22KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 6KB

.keybF
Size: 1KB - Virtual size: 36KB

.i
Size: 3KB - Virtual size: 24KB

.nZAYb
Size: 1KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 22KB

.fLhZz
Size: 1KB - Virtual size: 12KB

.p
Size: 3KB - Virtual size: 31KB

.Y
Size: 2KB - Virtual size: 22KB

.rsrc
Size: 112KB - Virtual size: 112KB