ce15ef06b4fa3066ca37d37ec0fb4cd34fb05fdf5eb841f1289c40cf564b631a

Sharing

Copy URL Twitter E-mail

General

Target

ce15ef06b4fa3066ca37d37ec0fb4cd34fb05fdf5eb841f1289c40cf564b631a
Size

296KB
MD5

9e9a7590b80e660b618c57c5ce2fc9dc
SHA1

25b62c086ec1aaaf07d97e7a35ac7a6e1128e508
SHA256

ce15ef06b4fa3066ca37d37ec0fb4cd34fb05fdf5eb841f1289c40cf564b631a
SHA512

60d8feb8f583b1a4f1dd212f1ed92407b63b6f2703890258fae05c5e44f30326eea1cc966397c7a0068fca4aafb0fbfd2bcf2a21235d5c9a38f6fa008aebd2ce
SSDEEP

6144:d6fFG6pi1mbRSl6Ro1Ulpxs1QwHkzUx6S1wA5XMtzCoMCP/sIJPFMI9WIvxe:d6Y8Sipx5QbFJQ2HCPPPOwWI8

Score

N/A

Malware Config

Signatures

Files

ce15ef06b4fa3066ca37d37ec0fb4cd34fb05fdf5eb841f1289c40cf564b631a
.exe windows x86

3ed61d2759f6a5e5b8188ad64bb72a92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheEntryW

user32

CharNextW
UnregisterClassA

kernel32

CreateFileA
GetThreadLocale
FreeEnvironmentStringsW
IsDebuggerPresent
FlushFileBuffers
GetTempPathW
WriteConsoleW
WriteFile
FindResourceExW
FreeEnvironmentStringsA
GetStdHandle
LockResource
CreateEventW
SignalObjectAndWait
IsValidCodePage
RtlUnwind
HeapReAlloc
FreeLibrary
SetThreadLocale
UnhandledExceptionFilter
LoadResource
GetProcessHeap
LCMapStringA
HeapSize
WriteConsoleA
SetLastError
GetConsoleCP
TlsFree
DeleteCriticalSection
SetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
lstrcmpiW
GetFileType
FindResourceW
CreateMutexW
HeapAlloc
lstrlenW
GetOEMCP
WaitForSingleObject
GetConsoleOutputCP
GetModuleHandleA
FormatMessageW
WaitForMultipleObjects
CreateThread
OutputDebugStringW
ResumeThread
GetACP
ReleaseMutex
ResetEvent
SetFilePointer
GetConsoleMode
LeaveCriticalSection
TlsGetValue
TlsSetValue
EnterCriticalSection
LoadLibraryExW
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
CreateFileW
GetLocalTime
GetModuleHandleW
SizeofResource
GetUserDefaultLangID
OpenEventW
RaiseException
HeapDestroy
LocalFree
VirtualFree
WideCharToMultiByte
HeapFree
TlsAlloc
GetCommandLineA
LCMapStringW
VirtualAlloc
LoadLibraryW
VirtualAllocEx

urlmon

CoInternetGetSession
CoInternetCreateSecurityManager
FindMimeFromData

ole32

CoInitializeEx
CoCreateInstance
StringFromGUID2
CoUninitialize
OleRun
CLSIDFromString
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

shlwapi

PathAppendW
PathStripPathW
PathRemoveFileSpecW

oleaut32

SafeArrayRedim
SafeArrayGetLBound
LoadTypeLi
DispCallFunc
SysAllocStringByteLen
SysFreeString
SafeArrayGetUBound
SafeArrayGetVartype
UnRegisterTypeLi
SafeArrayUnlock
VariantInit
VariantClear
SafeArrayCopy
RegisterTypeLi
SafeArrayDestroy
VarUI4FromStr
LoadRegTypeLi
SafeArrayCreate
GetErrorInfo
SafeArrayLock
SysStringLen
VariantCopyInd
SysAllocString

advapi32

RegEnumKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

atmlib

ATMFinish
ATMGetNtmFields
ATMBBoxBaseXYShowText
ATMFontStatusW
ATMForceFontChange
ATMFontAvailableA
ATMClient
ATMGetFontBBox
ATMEnumFontsA
ATMEndFontChange
ATMGetFontInfo
ATMGetOutline

kbdsl1

KbdLayerDescriptor

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ed61d2759f6a5e5b8188ad64bb72a92

Headers

File Characteristics

Imports

wininet

user32

kernel32

urlmon

ole32

shlwapi

oleaut32

advapi32

atmlib

kbdsl1

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 264KB - Virtual size: 1.3MB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 264KB - Virtual size: 1.3MB

.rsrc
Size: 6KB - Virtual size: 6KB