1f7344dd6885cd30018594c082fa2fef215e4688395d850607a0967fcf49fe5f

Sharing

Copy URL Twitter E-mail

General

Target

1f7344dd6885cd30018594c082fa2fef215e4688395d850607a0967fcf49fe5f
Size

47KB
MD5

767fa195405d0f2c98251ad8c32a72f0
SHA1

2576af7512c264b7b395cd5348122e16dc847080
SHA256

1f7344dd6885cd30018594c082fa2fef215e4688395d850607a0967fcf49fe5f
SHA512

126c8591cf8af08f4b8fb042673d872a6a0245a469d7d6b4e70f7507ef50be75c1b97a7f73f230d4416fbf8db62671f93d09472b46280f011c2c12e8cb542f4d
SSDEEP

768:iuGXL30P9XV9+fiX6QLPNRS0aAl16My/JS6iccG6MoJrQ:8BfiX6QLPNRHaIy/JRiBMom

Score

N/A

Malware Config

Signatures

Files

1f7344dd6885cd30018594c082fa2fef215e4688395d850607a0967fcf49fe5f
.exe windows x86

06dd9acc5c5203eed1f923b900192bd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetPath
SelectObject

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup

user32

OpenClipboard
MessageBoxIndirectA
MessageBoxA
MapVirtualKeyA
LoadIconA
IsClipboardFormatAvailable
GetWindowTextA
GetWindowRect
GetMessageA
RegisterHotKey
GetKeyState
GetKeyNameTextA
GetForegroundWindow
GetDC
GetClipboardData
GetClassNameA
EnumChildWindows
CloseClipboard
CallNextHookEx
ReleaseDC
SendMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx
GetKeyboardState

kernel32

ExitProcess
lstrlenA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WideCharToMultiByte
TerminateProcess
Sleep
RtlZeroMemory
RtlMoveMemory
ReleaseMutex
ReadFile
Process32Next
Process32First
OpenProcess
OpenMutexA
MultiByteToWideChar
LeaveCriticalSection
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
CloseHandle
CreateDirectoryA
CreateFileA
CreateMutexA
CreatePipe
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
GetFileSize
ExpandEnvironmentStringsA
FindFirstFileA
GetCurrentProcess
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTickCount
GetTimeFormatA
GlobalAlloc
GlobalFree

advapi32

OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
AdjustTokenPrivileges

wininet

HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpOpenRequestA
HttpAddRequestHeadersA
HttpQueryInfoA

shell32

ShellExecuteA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

06dd9acc5c5203eed1f923b900192bd5

Headers

File Characteristics

Imports

ole32

gdi32

gdiplus

user32

kernel32

advapi32

wininet

shell32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 9KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 9KB

.rsrc
Size: 31KB - Virtual size: 30KB