ff5bae06745e68af88b6a44f98d01b70a071324be8671af402cf97c8cf2a46fd

Sharing

Copy URL

Twitter E-mail

General

Target

ff5bae06745e68af88b6a44f98d01b70a071324be8671af402cf97c8cf2a46fd
Size

197KB
MD5

22eb779a6756b495723781bfdbb6ac00
SHA1

16bdc673702aa2ace15a824f70284c6af10b8d6e
SHA256

ff5bae06745e68af88b6a44f98d01b70a071324be8671af402cf97c8cf2a46fd
SHA512

5f927bc2168c66e5363073b08e640b9c3a91e17c5f127eb1393503be6ed65c2084c2a5f9622a6500c7ab47312ee3864f6080bf7af67f3f7dce84f65fc99274ae
SSDEEP

3072:gYuzcf/Xj9GaWyQvGk6ZdTb0zVjO6KhfSpsKsnUxouOTJrGD8qgLGFPJmKz:SzmxGzlvGHLTb0zVtK9P3qoID8TGFX

Score

N/A

Malware Config

Signatures

Files

ff5bae06745e68af88b6a44f98d01b70a071324be8671af402cf97c8cf2a46fd
.exe windows x86

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetModuleHandleA
GetSystemWindowsDirectoryW
lstrcmpiW
GetACP
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
SetLastError
CloseHandle
GetCPInfo
CreateFileW
FileTimeToSystemTime
GetDateFormatW
lstrcpyW
IsValidCodePage
FileTimeToLocalFileTime
GlobalAlloc
GetLastError
GetCurrentProcess
WideCharToMultiByte
RemoveDirectoryA
InterlockedDecrement
MultiByteToWideChar
OutputDebugStringA
LocalReAlloc
GetProcAddress
GetModuleFileNameW
GlobalUnlock
SetUnhandledExceptionFilter
GetStartupInfoA
QueryPerformanceCounter
lstrlenW
FormatMessageW
GetEnvironmentStringsA
OutputDebugStringW
GetTickCount
GetSystemTimeAsFileTime
GlobalLock
GlobalFree
InterlockedIncrement
GetComputerNameW
IsBadReadPtr

msvcrt

_except_handler3
wcsstr
?terminate@@YAXXZ
free
malloc
??3@YAXPAX@Z
wcsrchr
_onexit
mbstowcs
memmove
wcscat
wcslen
__dllonexit
??2@YAPAXI@Z
_wcsicmp
wcscmp
wcstoul
__RTDynamicCast
wcscpy
_wcsupr
wcschr
vswprintf
_adjust_fdiv
_purecall
_initterm
??1type_info@@UAE@XZ

certcli

CAGetCertTypeFlags
CAFindByName
CAGetCertTypeKeySpec
CASetCertTypeFlags
CARemoveCACertificateType
CAGetCertTypeExtensions
CAEnumCertTypesForCA
CASetCertTypeExtension
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CACreateCertType
CAGetCertTypeProperty
CAGetCertTypePropertyEx
CACertTypeSetSecurity
CACloseCA
CAEnumNextCertType
CAAddCACertificateType
CAUpdateCertType
CAUpdateCA
CAGetCAProperty
CAFindCertTypeByName
CAFreeCAProperty
CACloseCertType
CAEnumCertTypes
CASetCertTypeProperty

user32

SetFocus
MessageBoxW
SetDlgItemTextW
LoadCursorW
LoadStringW
SystemParametersInfoW
WinHelpW
LoadIconW
InsertMenuItemW
DialogBoxParamW
RegisterClipboardFormatW
SendMessageW
EnableWindow
LoadBitmapW
PostMessageW
SetWindowTextW
GetDlgItemTextA
EndDialog
LoadImageW
GetWindowLongW
ReleaseDC
wsprintfW
SetCursor
GetDlgItem
SetWindowLongW
GetDC
GetParent
SendDlgItemMessageW

comctl32

PropertySheetW
CreatePropertySheetPageW

advapi32

RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

shell32

ShellExecuteExW
ShellExecuteW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

Imports

kernel32

msvcrt

certcli

user32

comctl32

advapi32

gdi32

shell32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 123KB - Virtual size: 2.3MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 123KB - Virtual size: 2.3MB

.rsrc
Size: 3KB - Virtual size: 2KB