a1a7fa20acd404be33563448207fff54cd589ba0ad29f4b24659af19c35154df

Sharing

Copy URL Twitter E-mail

General

Target

a1a7fa20acd404be33563448207fff54cd589ba0ad29f4b24659af19c35154df
Size

5.6MB
MD5

64156f16763a017bd9a9dd01e41acb87
SHA1

bd869c9fe542018e164a87a6f809eb21d41f87bc
SHA256

a1a7fa20acd404be33563448207fff54cd589ba0ad29f4b24659af19c35154df
SHA512

4c8b2504490493f9d20421a7aabe9da75045b7f3e8f2c587a4cbd4ca7916faf893ad037ab0cea71289e427f102ec9d95434fe5827bdbf8b0c9c0c2c811f0a93b
SSDEEP

49152:dqnj9Ppr1D6F2222TFJ4M2yyoKRi7jb480K:dG9hr1GF2222TFJ4M2yyoKRi7jb480K

Score

N/A

Malware Config

Signatures

Files

a1a7fa20acd404be33563448207fff54cd589ba0ad29f4b24659af19c35154df
.exe windows x86

b1138aa36355a3af446efe97940bac65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
OutputDebugStringA
MultiByteToWideChar
FindClose
FindNextFileA
FindFirstFileA
GetCurrentThreadId
CreateMutexA
Sleep
OpenMutexA
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
CreateEventA
SetEvent
GetTickCount
InterlockedIncrement
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateDirectoryA
IsBadReadPtr
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
SetLastError
TlsAlloc
ExitProcess
GetStartupInfoA
GetModuleHandleA
RaiseException
ExitThread
TlsGetValue
TlsSetValue
CreateThread
ResumeThread
HeapReAlloc
GetCurrentDirectoryA
SetEnvironmentVariableA
HeapFree
HeapAlloc
RtlUnwind
lstrcatA
MoveFileExA
GetLastError
FormatMessageA
LocalFree
lstrcmpA
GetTempPathA
GetTempFileNameA
CopyFileA
GetCurrentProcessId
OpenProcess
CloseHandle
DeleteFileA
GetWindowsDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetCommandLineA
SetPriorityClass
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetVersion
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
lstrcmpiA
lstrlenA
IsBadCodePtr
lstrcpyA

user32

FindWindowExA
LoadIconA
EnumWindows
ClientToScreen
KillTimer
SetTimer
SetRect
PostQuitMessage
CheckMenuItem
RemoveMenu
LoadMenuA
DestroyMenu
MoveWindow
SendNotifyMessageA
GetForegroundWindow
IsWindowVisible
IsIconic
IsZoomed
GetSystemMetrics
GetFocus
DrawFocusRect
GetSubMenu
RegisterClassExA
LoadCursorA
GetClassInfoExA
TrackPopupMenu
GetDlgItem
GetDesktopWindow
EndDialog
GetClientRect
CopyRect
BeginPaint
FillRect
InvalidateRect
PtInRect
SetCursor
SetFocus
SetCapture
GetCapture
ReleaseCapture
GetCursorPos
ScreenToClient
SetRectEmpty
DestroyWindow
GetMessageA
DestroyCursor
PeekMessageA
TranslateMessage
DispatchMessageA
FindWindowA
PostMessageA
GetWindowThreadProcessId
ShowWindow
wsprintfA
MessageBeep
GetActiveWindow
DialogBoxParamA
MessageBoxA
WaitForInputIdle
LoadStringA
GetWindow
GetWindowRect
SystemParametersInfoA
MapWindowPoints
SetWindowPos
ReleaseDC
EndPaint
CharNextA
CreateWindowExA
CallWindowProcA
DefWindowProcA
IsWindow
GetDC
DrawTextA
OffsetRect
GetClassNameA
GetWindowLongA
CreateCursor
GetParent
SendMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowLongA
LoadBitmapA
MsgWaitForMultipleObjects

gdi32

SetTextColor
CreateCompatibleDC
DPtoLP
CreateBitmap
CreateCompatibleBitmap
GetMapMode
SetMapMode
SetBkColor
DeleteObject
DeleteDC
SelectObject
GetObjectA
SetBkMode
BitBlt
CreateFontIndirectA

advapi32

RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Shell_NotifyIconA

winmm

timeGetTime

ole32

CoUninitialize
CoInitialize
CoCreateInstance

comctl32

InitCommonControlsEx

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1138aa36355a3af446efe97940bac65

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

winmm

ole32

comctl32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 14KB

.rsrc Size: 5.5MB - Virtual size: 5.5MB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 5.5MB - Virtual size: 5.5MB