f2d78e2a6ce77bc16f77994776eda71eebf6fb79918d2b29dbddab34a21d5041

Sharing

Copy URL Twitter E-mail

General

Target

f2d78e2a6ce77bc16f77994776eda71eebf6fb79918d2b29dbddab34a21d5041
Size

709KB
MD5

703205d58784006e2d26107030531060
SHA1

f495d4f3c30a5bb1a480242c72f8bc409a8cbd6b
SHA256

f2d78e2a6ce77bc16f77994776eda71eebf6fb79918d2b29dbddab34a21d5041
SHA512

2241ed11be0f97625f83ab3bab5493c6c092e82eadc0eeed983a20bba61b4126ebb84204e8a395caeac7b2a63e197ae3183a81c1ddcda04da7014ced121e16c9
SSDEEP

3072:zTmZ+/xVVeVxwAxWA1KHvCfuDiKTPEHOIJugJF4ZayOMIwQ2yXsVT2iEYRwpkduK:zqmQ54AgPCfuDiiMuP/Usp2iEuw

Score

N/A

Malware Config

Signatures

Files

f2d78e2a6ce77bc16f77994776eda71eebf6fb79918d2b29dbddab34a21d5041
.exe windows x86

5b9020bcc6d23b5b9cd66bbc5292bf37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
LockResource
SizeofResource
LoadResource
SetLastError
FindResourceA
GlobalUnlock
GlobalLock
GetTickCount
FreeLibrary
GetProcAddress
GetFileSize
CreateFileA
GetLocaleInfoA
GetWindowsDirectoryA
GlobalAlloc
GetEnvironmentVariableA
SetPriorityClass
GetVersionExA
Sleep
GetCurrentProcess
QueryPerformanceCounter
GetPriorityClass
ReadFile
GlobalFree
GetModuleFileNameA
QueryPerformanceFrequency
CloseHandle
SetFilePointer
WriteFile
GetLastError
FormatMessageA
LocalAlloc
LoadLibraryA
SetStdHandle
HeapAlloc
HeapFree
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
ExitProcess
MultiByteToWideChar
GetStringTypeW
LocalFree
GetStringTypeA
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetSystemTime
LCMapStringW
LCMapStringA
HeapReAlloc
GetTimeZoneInformation
CompareStringA
CompareStringW
FlushFileBuffers
SetEnvironmentVariableA

user32

SetWindowPos
SendDlgItemMessageA
MessageBoxA
LoadStringA
DestroyWindow
MapDialogRect
GetParent
SendMessageA
GetDlgItem
GetDialogBaseUnits
wsprintfA
WinHelpA
GetMenu
GetMenuState
CheckMenuItem
SetMenuItemInfoA
LoadIconA
SetClassLongA
GetDC
DrawIconEx
ReleaseDC
IsWindowEnabled
GetWindowTextLengthA
KillTimer
SetTimer
SetFocus
SetWindowLongA
GetKeyState
CallWindowProcA
DialogBoxParamA
MessageBeep
GetDlgItemTextA
EndDialog
SetWindowTextA
SetDlgItemTextA
EnableWindow
CreateDialogIndirectParamA
CreateWindowExA
GetWindowLongA
LoadImageA

gdi32

GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

imagehlp

MapFileAndCheckSumA

comctl32

ord17

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b9020bcc6d23b5b9cd66bbc5292bf37

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

imagehlp

comctl32

version

Sections

.text Size: 98KB - Virtual size: 98KB

.rdata Size: 1024B - Virtual size: 1015B

.data Size: 16KB - Virtual size: 51KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 588KB - Virtual size: 588KB

.text
Size: 98KB - Virtual size: 98KB

.rdata
Size: 1024B - Virtual size: 1015B

.data
Size: 16KB - Virtual size: 51KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 588KB - Virtual size: 588KB