edd002a6d45a3c07f7e1dd1919e69d69aee81c8117287b89e066bdff7c2e7d97

Sharing

Copy URL Twitter E-mail

General

Target

edd002a6d45a3c07f7e1dd1919e69d69aee81c8117287b89e066bdff7c2e7d97
Size

244KB
MD5

24a2922bb1ed2a3659b6fd954b66e9f5
SHA1

69c9237fe147e7fe78bb7906b58698677576e1e2
SHA256

edd002a6d45a3c07f7e1dd1919e69d69aee81c8117287b89e066bdff7c2e7d97
SHA512

c00f7f54d086fea19d6f0ad85cc376b726f56b3daa85c0d8ac09c4e15dd00449f00bb3ed54a1ac02d64d0267345a242f0eeb6bd52b7f6ab5adf0ae643e99c117
SSDEEP

3072:W6pvzX9Cy6Z/nC1vffZE12OGi45SadTqusrcRkxcOxNCf9ip2ZoLHvf/YQpXISN8:WeztOZ/ivfNi45LBsr5VNwrZotFN65

Score

N/A

Malware Config

Signatures

Files

edd002a6d45a3c07f7e1dd1919e69d69aee81c8117287b89e066bdff7c2e7d97
.exe windows x86

b7b7a172068c89f347bf44ddbbcd29e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
HeapDestroy
TlsSetValue
GetVersionExA
RaiseException
GetCurrentProcess
GetCommandLineW
GetFileSize
InitializeCriticalSectionAndSpinCount
GetLastError
LoadLibraryW
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
GetStdHandle
LoadLibraryA
GetProcAddress
IsBadWritePtr
VirtualAlloc
HeapAlloc
GetOEMCP
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RtlUnwind
HeapFree
VirtualFree
GetEnvironmentVariableA
GetCurrentThread
SetLastError
DeleteCriticalSection
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetVersion
RegisterWaitForSingleObject
GetModuleHandleA
QueryPerformanceCounter
GetProcessHeap
MultiByteToWideChar
SetErrorMode
SetEvent
TerminateProcess
LoadResource
FreeEnvironmentStringsW
GetCurrentProcessId
FlushFileBuffers
GetStartupInfoA
TlsFree
GetFileAttributesW
VirtualAllocEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
WideCharToMultiByte
GetModuleFileNameW
HeapReAlloc
InterlockedDecrement
WriteFile
TlsAlloc
SetUnhandledExceptionFilter
InterlockedIncrement
FindFirstFileW
HeapCreate
GetACP
CreateThread
GetTickCount
GetCommandLineA
CreateFileW
HeapSize
GetFileType
Sleep
SetEndOfFile
GetCurrentThreadId
GetCPInfo
FreeLibrary
GetFileSizeEx
TlsGetValue
GetModuleHandleW
lstrlenW
LCMapStringA
SetEnvironmentVariableA

user32

GetWindowTextLengthW
MessageBoxW
BeginPaint
EndPaint
SetTimer
GetCursorPos
GetWindowTextLengthA
LoadStringA
GetParent
ReleaseDC
GetDlgItemInt
SetWindowPos
SetForegroundWindow
LoadStringW
MessageBoxA
GetDlgItem
GetWindowTextA
EnableWindow
TranslateMessage
GetDlgItemTextA
EndDialog
GetDlgItemTextW
IsWindowUnicode
SendMessageA
GetWindowTextW
GetWindowDC
PostQuitMessage
GetWindowPlacement
GetClientRect
GetSystemMetrics
DestroyWindow
GetWindowLongA
GetWindowThreadProcessId
ShowWindowAsync
GetDCEx
GetWindowLongW
GetSysColorBrush
ShowWindow
IsWindowEnabled
IsWindowVisible
InvalidateRect
GetMenuItemCount
SetCursor
SetRectEmpty
GetDesktopWindow
GetWindowRect

gdi32

GetObjectW
CreateRectRgnIndirect
BitBlt
CreateSolidBrush
ExtTextOutW
CreateCompatibleBitmap
CreateBitmap
PatBlt
SaveDC
GetClipBox
RestoreDC
StretchBlt
CreateFontIndirectA
SetViewportOrgEx
SelectPalette
CreatePenIndirect
CreateFontIndirectW
ExtSelectClipRgn
GetStretchBltMode
RealizePalette
CreatePalette
ExtCreatePen
SetWindowOrgEx
GetObjectA
ExtTextOutA
CreateDIBSection
CreateDIBitmap
MoveToEx
LineTo
RectVisible
Rectangle
SetMapMode
GetTextExtentPoint32W
SelectClipRgn
SetBkColor
CreateCompatibleDC
GetStockObject
DeleteDC
SetTextColor
SetStretchBltMode
GetDeviceCaps
SelectObject
DeleteObject
SetBkMode

ole32

CoInitializeSecurity
RegisterDragDrop
CoQueryProxyBlanket
StringFromCLSID
CoDisconnectObject
OleRun
CoInitialize
ReleaseStgMedium
OleFlushClipboard
CoCreateGuid
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoGetClassObject
CoUninitialize
CoLockObjectExternal
CLSIDFromProgID
CreateBindCtx
CoSetProxyBlanket
CoCreateInstance
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CLSIDFromString
CoRevokeClassObject
CoTaskMemFree
GetRunningObjectTable
CoFreeUnusedLibraries
RevokeDragDrop
OleInitialize
OleRegGetUserType
OleUninitialize
CreateILockBytesOnHGlobal

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7b7a172068c89f347bf44ddbbcd29e7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 160KB - Virtual size: 273KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 160KB - Virtual size: 273KB

.rsrc
Size: 16KB - Virtual size: 12KB