efc7b24b1a7432ef4e0b0f02860bec327a2955950d73f2ad5563f9c580a54ce0

Sharing

Copy URL Twitter E-mail

General

Target

efc7b24b1a7432ef4e0b0f02860bec327a2955950d73f2ad5563f9c580a54ce0
Size

179KB
MD5

657aec93c1e848890f458ad718aefc7c
SHA1

4aa6e2fc09b1524a6120c1f8d5ea0ef502fb09e7
SHA256

efc7b24b1a7432ef4e0b0f02860bec327a2955950d73f2ad5563f9c580a54ce0
SHA512

5aa82c06bfceccb06d113adfc66acc98fcab52606c10df5f172a54f344305ac33e37d4acd2481d672e8e5ca020f525450dbe570fa6a3b9ccef64d7267b5d7ec3
SSDEEP

3072:SqRl4Od0PP+SKtRgA9rtPsDhKGCixTNgQhI84jpKfWqK+PZP:S+V0ehgurtUDsGXZjI8gSrP

Score

N/A

Malware Config

Signatures

Files

efc7b24b1a7432ef4e0b0f02860bec327a2955950d73f2ad5563f9c580a54ce0
.exe windows x86

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeA

comctl32

ImageList_GetIcon

user32

OpenDesktopW
AllowSetForegroundWindow
SetCaretPos
LoadStringA
GetActiveWindow
GetKeyboardType
wvsprintfA
DialogBoxParamA
LoadIconA
DialogBoxIndirectParamW
GetForegroundWindow
GetClassInfoA
AttachThreadInput
SetWindowTextA
IsCharUpperA
GetWindowTextA
InsertMenuItemW
GetScrollPos
GetWindowPlacement
DestroyWindow
GetClipCursor
CharPrevW
ClientToScreen
FillRect
HiliteMenuItem
CreateDialogParamW
CreateAcceleratorTableW
InvalidateRect
LoadMenuA
SetDlgItemTextW
CharUpperA
GetIconInfo
WaitMessage
GetTopWindow
DefDlgProcW
OpenIcon
GetMessageW
ModifyMenuW
ArrangeIconicWindows
DragObject
SetTimer
CreateMenu
GetKeyboardLayout
CreateIconFromResource
LoadAcceleratorsW
CreateCaret
WindowFromPoint
SendMessageTimeoutW
MapDialogRect
GetDlgItemTextW
GetWindowLongW
SetDlgItemInt

gdi32

CreateBrushIndirect
GetLayout
SelectPalette
GetPaletteEntries
GetROP2
CreateDiscardableBitmap
SetBkMode
GetBitmapBits
SetMapMode
GetTextColor
GetWindowOrgEx
OffsetViewportOrgEx
TextOutA
CreateBitmap
CreatePalette
CreatePolygonRgn
ExtTextOutW
PolyBezier
GetMapMode
SelectObject
SetStretchBltMode
SetRectRgn
GetViewportOrgEx

kernel32

GetPriorityClass
FindFirstChangeNotificationW
GetLongPathNameW
GlobalHandle
AddAtomW
FlushFileBuffers
SetEvent
CancelIo
WaitForMultipleObjectsEx
HeapSize
VerifyVersionInfoW
FlushViewOfFile
lstrcmpW
GetACP
EscapeCommFunction
GetModuleFileNameA
SetThreadLocale
ResumeThread
FindFirstFileA
ConvertDefaultLocale
IsBadReadPtr
FindCloseChangeNotification
LoadResource
MoveFileExA
VerSetConditionMask
SetFileApisToOEM
SetFileTime
lstrcmpiA
EnumSystemLocalesA
FindResourceExA
GetWindowsDirectoryW
GetTickCount
FindNextFileW
GetFileAttributesExW
CreateSemaphoreA
GetVersionExA
GlobalAddAtomA
FoldStringW
IsBadStringPtrW
MoveFileA
GetStartupInfoA
GetOverlappedResult
SetSystemTimeAdjustment
EnumResourceNamesA
GlobalMemoryStatus
RaiseException
RemoveDirectoryW
ConnectNamedPipe

Exports

Exports

IsValidScreenA
OnHeaderNew
RtlFullNameNew
InsertValueW
RtlAnchor
FullNameExA
SendScreenEx
CloseMutantW
OnMonitor
AppNameOld
FormatCharOld
RtlFunctionEx
GenerateDataOld
FindDataA
PutMediaType
KillRectOld
ValidateVersion
CancelFolderPathOriginal
LoadClassA
IsNotHeight
CallObjectEx
InsertWindowOld
FormatDeviceOld
FindFolderExA
IncrementMutexExA
IsValidEventOld
LoadNameOld
ModifySizeOld
InstallWindowInfoNew
RtlConfigEx
CopyListOld
ValidateExpressionW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zek
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.On59 Size: 3KB - Virtual size: 2KB

.Zek Size: 1024B - Virtual size: 822B

.Re82 Size: 22KB - Virtual size: 25KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 512B - Virtual size: 450B

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 140KB - Virtual size: 140KB

.On59
Size: 3KB - Virtual size: 2KB

.Zek
Size: 1024B - Virtual size: 822B

.Re82
Size: 22KB - Virtual size: 25KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 512B - Virtual size: 450B

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB