b3f67e4488354140926dc34a8c627d0d3ade4e03754dab769e8f1116c176692e

Sharing

Copy URL Twitter E-mail

General

Target

b3f67e4488354140926dc34a8c627d0d3ade4e03754dab769e8f1116c176692e
Size

257KB
MD5

8a552b6c31decf5b3f70c6f04bef10b2
SHA1

a35892d6fe544b30a769e2396dd9bb4405637d86
SHA256

b3f67e4488354140926dc34a8c627d0d3ade4e03754dab769e8f1116c176692e
SHA512

25b57cbe26ae49a765ed040b93baf0e5ae214bbbb65f7b756463eb7f87feecc5cee0019d010f99d3d1b5c38a105c5f85c136453cdb6c9387ee75995003e24f56
SSDEEP

6144:A6uOrfrPNnOepRJo1njv1DpIp3fFRuqBvrNlbsoAt:A6u6fDdnpRJopjmPFRDFrsoe

Score

N/A

Malware Config

Signatures

Files

b3f67e4488354140926dc34a8c627d0d3ade4e03754dab769e8f1116c176692e
.exe windows x86

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
BeginUpdateResourceW
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
LoadMenuIndirectA
CharLowerW
mouse_event
GetMenuInfo
CharPrevW
GetClassInfoW
SetDlgItemInt
GetMenuItemRect
MessageBoxIndirectA
SetDlgItemTextA
DialogBoxIndirectParamA
WinHelpW
GetKeyboardType
IsChild
SetMenu
GetSysColor
CopyIcon
GetDlgItemInt
CreateDialogIndirectParamW
keybd_event
PeekMessageA
GetCapture
RegisterWindowMessageW

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateMetaFileW
GetEnhMetaFileA
SetWinMetaFileBits
AddFontResourceA
GdiGetBatchLimit
UpdateICMRegKeyA
RemoveFontResourceA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

AVIStreamWriteData
AVIFileOpenW
AVIStreamEndStreaming
AVIFileAddRef
AVIFileEndRecord
AVIBuildFilter
AVISaveW
EditStreamSetInfoA
AVIStreamOpenFromFile
AVIClearClipboard
EditStreamCopy
AVIStreamFindSample

Sections

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.icode
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l
Size: 107KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unIsec
Size: 112KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33d023a21f132d77995ad3d356fa02fe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

.edata Size: 5KB - Virtual size: 5KB

.icode Size: 14KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 16KB

.l Size: 107KB - Virtual size: 149KB

.data Size: 7KB - Virtual size: 331KB

.unIsec Size: 112KB - Virtual size: 166KB

.rsrc Size: 7KB - Virtual size: 6KB

.edata
Size: 5KB - Virtual size: 5KB

.icode
Size: 14KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 16KB

.l
Size: 107KB - Virtual size: 149KB

.data
Size: 7KB - Virtual size: 331KB

.unIsec
Size: 112KB - Virtual size: 166KB

.rsrc
Size: 7KB - Virtual size: 6KB