65d6378d53ea43d0eae43f84dcb25a311ba205447ceea513f317fc166fa76498

Sharing

Copy URL Twitter E-mail

General

Target

65d6378d53ea43d0eae43f84dcb25a311ba205447ceea513f317fc166fa76498
Size

15KB
MD5

392b14008ae3433bf0382b5c8f95bc7f
SHA1

1c5bb551fc45df42827992aed7298d21b5e26c05
SHA256

65d6378d53ea43d0eae43f84dcb25a311ba205447ceea513f317fc166fa76498
SHA512

bed007631c05e61d2b51dd6afb95f1cccc30280b221d33c9edd8a51cb14a909ad3fe1de9a7702dfdc1bba8ded9948210b8a3fc9c0902caae74db316a8c06e38e
SSDEEP

384:l7dIn8BqVX2hhtK4d1ij5bzR2LrLdSpo+8dmlOxY:l7Sz9WhcrbzR2L1Uo+84WY

Score

N/A

Malware Config

Signatures

Files

65d6378d53ea43d0eae43f84dcb25a311ba205447ceea513f317fc166fa76498
.exe windows x86

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MultiByteToWideChar
OpenProcess
ReadFile
RtlMoveMemory
RtlZeroMemory
FindNextFileA
GlobalUnlock
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrlenA
FindFirstFileA
GlobalLock
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetLocalTime
GetFileSize
GetFileAttributesA
GetEnvironmentVariableA
GetCommandLineA
FindClose
FreeResource
FreeLibrary
SetFileAttributesA
FindResourceA
ExitProcess
DeleteFileA
CreateThread
CreateProcessA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateDirectoryA
CopyFileA
SetEndOfFile
CloseHandle

user32

UpdateWindow
TranslateMessage
ToAsciiEx
ShowWindow
SetTimer
SetClipboardViewer
SendMessageA
RegisterRawInputDevices
RegisterClassExA
OpenClipboard
MapVirtualKeyExA
LoadIconA
LoadCursorA
IsClipboardFormatAvailable
GetWindowThreadProcessId
wsprintfA
ChangeClipboardChain
CloseClipboard
CreateWindowExA
DefWindowProcA
GetMessageA
DispatchMessageA
GetClassNameA
GetClipboardData
GetDC
GetForegroundWindow
GetKeyNameTextA
GetKeyboardLayout
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetRawInputData
GetKeyboardState

shlwapi

PathRenameExtensionA
PathMatchSpecA
PathAddBackslashA
PathFindFileNameA

advapi32

AllocateAndInitializeSid
CryptEncrypt
CryptExportKey
CryptGenKey
CryptReleaseContext
FreeSid
RegCreateKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
CryptAcquireContextA
CheckTokenMembership
CryptDestroyKey

ws2_32

socket
recv
gethostbyname
connect
closesocket
WSAStartup
send

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
FtpPutFileA

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
SelectObject
StretchBlt
CreateDIBSection

gdiplus

GdipDisposeImage
GdipGetImageEncodersSize
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders

psapi

GetProcessImageFileNameA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

advapi32

ws2_32

wininet

gdi32

gdiplus

psapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 59KB

.rsrc Size: 512B - Virtual size: 376B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 59KB

.rsrc
Size: 512B - Virtual size: 376B