cb22fd98a97537e585939677ea3dcb7c805d2149fc4445e5073687c06400a82e

Sharing

Copy URL Twitter E-mail

General

Target

cb22fd98a97537e585939677ea3dcb7c805d2149fc4445e5073687c06400a82e
Size

214KB
MD5

a2be99380a72082c4531da9c230398a6
SHA1

1b68a928d45f57a5d177aeea2a304c77163b52b6
SHA256

cb22fd98a97537e585939677ea3dcb7c805d2149fc4445e5073687c06400a82e
SHA512

1dcb78d0315a7f9279b7db453d00dc3af742a431f470f0aff388d5886759d2c2f81ae3b2f2119fe63345692c32288dd51ed408905a26b3b8c48e16b9d7efa92c
SSDEEP

3072:umFtDZS6xx2kulnaHJ8QIXwrZdVnn4r5jl50nvvhy6Ke1:zjDZ7I28Qdr9Y5JGn3hyjg

Score

N/A

Malware Config

Signatures

Files

cb22fd98a97537e585939677ea3dcb7c805d2149fc4445e5073687c06400a82e
.exe windows x86

64ef15448025e5fe8413618e9b1e3218

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
SetTextColor
DeleteDC
CreateDIBSection
Rectangle
RectInRegion
SetBkMode
DeleteObject
SetMapMode
ExtTextOutA
EndPage
GetTextMetricsA
GetStockObject
SelectClipRgn
Polyline
SetTextAlign
GetDeviceCaps
CreateRectRgnIndirect
RestoreDC
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
SaveDC
StartDocA
EndDoc
GetObjectA
BitBlt
SetROP2
StartPage
GetBkMode
SetBkColor
GetTextExtentPoint32A
GetBkColor
MoveToEx

kernel32

GetStdHandle
UnhandledExceptionFilter
GetCommandLineW
GetModuleFileNameA
GetEnvironmentStringsW
GetLastError
TlsFree
InterlockedDecrement
FreeLibrary
Module32First
VirtualAlloc
GetACP
ReadProcessMemory
DuplicateHandle
GetConsoleMode
VirtualFree
MultiByteToWideChar
SetEnvironmentVariableA
MapViewOfFile
TlsAlloc
GetComputerNameW
DeleteCriticalSection
RtlUnwind
GetCurrentThreadId
TerminateThread
GetFileAttributesA
VirtualQueryEx
GetThreadContext
Module32Next
ExitProcess
LoadLibraryW
CreateProcessA
GetCurrentProcess
GetVersionExA
ExpandEnvironmentStringsA
lstrcmpA
lstrlenA
TlsGetValue
HeapAlloc
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
LocalAlloc
GetStartupInfoA
SearchPathA
TerminateProcess
QueryPerformanceFrequency
ResumeThread
SizeofResource
WaitForSingleObject
ReadFile
HeapSize
GetStringTypeW
LeaveCriticalSection
LockResource
ResetEvent
LoadLibraryA
FindFirstFileA
IsValidCodePage
GetLocaleInfoA
GetModuleHandleA
GetTickCount
SetThreadAffinityMask
CreateThread
LCMapStringW
GetConsoleOutputCP
GetEnvironmentStrings
SetLastError
GetNumberFormatA
PulseEvent
lstrcatA
LCMapStringA
GetSystemInfo
GetEnvironmentVariableA
GlobalUnlock

user32

DrawIconEx
SetClipboardData
DialogBoxParamA
SetForegroundWindow
CreateIconIndirect
GetMenuItemID
SetWindowLongA
IntersectRect
DialogBoxIndirectParamA
GetPropA
GetSystemMetrics
WindowFromPoint
SetScrollInfo
InsertMenuA
SetPropA
SystemParametersInfoA
SendMessageTimeoutA
InvalidateRgn
BeginDeferWindowPos
CallWindowProcA
RedrawWindow
RegisterClassExA
wsprintfA
IsDialogMessageA
GetMenuItemCount
IsDlgButtonChecked
CheckMenuItem
CopyRect
RegisterWindowMessageA
CloseClipboard
GetMessageA
FillRect
SetFocus
LoadStringA
CheckRadioButton
SetMenuItemInfoA
SetCapture
CheckDlgButton
DrawEdge
RemoveMenu
DispatchMessageA
MapWindowPoints
FindWindowA
DestroyIcon
GetDlgItemTextA
RegisterClassA
TranslateMessage
FindWindowExA
MoveWindow
SetUserObjectSecurity
GetDoubleClickTime
ShowWindow
IsIconic
GetFocus
GetSysColor
EndPaint
GetWindowLongA
OffsetRect
GetWindowThreadProcessId
PeekMessageA
CreateWindowExA
EndDialog
DestroyWindow
GetWindowDC
GetClassNameA
EndDeferWindowPos
GetKeyState
SetDlgItemTextA

msvcrt

_wsplitpath
isspace
fseek
_snwscanf
_wtof
fprintf
_wcslwr
_close
ungetc
_get_sbh_threshold
_utime64
__setusermatherr
_wstati64
fmod
_mbsset
_acmdln
_strncoll
labs
_adj_fpatan
__getmainargs
_snscanf
_dup
ldiv
_stricoll
is_wctype
_XcptFilter
ldexp
_cprintf
_resetstkoflw
_fsopen
strspn
_pwctype
wprintf
_wutime
_heapwalk
_waccess
fwrite
_getw
_cscanf
_commode
fputs
_flsbuf
wcspbrk
strcspn
_wperror
_strlwr
__p__commode
_adjust_fdiv
_vscprintf
_wtoi
wscanf
_ismbbpunct
_strtoui64
ceil
_exit
_findclose
strtoul
_wfopen
_finite
_wutime64
_mbsncat
_wpopen
memcpy
_except_handler3
_heapset
_amsg_exit
_spawnve
getchar
wcsncpy
_setjmp3
_wcsupr
_cwait
tanh
__p__fmode
_adj_fdiv_r
_mbsbtype
_controlfp
_ismbbkprint
_mbsncpy
_findfirst
_wspawnlp
raise
_ismbbtrail
_wcstoi64
strcat
iswupper
_mbsnicoll
_getdcwd
getc
fscanf
gets
iswalpha
_initterm
exit
_ftime64
_telli64
_getmaxstdio
_ultow
tmpnam
srand
qsort
strpbrk
isalpha
_gcvt
towupper
__set_app_type
_adj_fprem1
_memicmp
_mbsdup
_fstati64

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64ef15448025e5fe8413618e9b1e3218

Headers

File Characteristics

Imports

gdi32

kernel32

user32

msvcrt

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 185KB - Virtual size: 184KB

.data Size: 512B - Virtual size: 127B

.rsrc Size: 512B - Virtual size: 4B

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 185KB - Virtual size: 184KB

.data
Size: 512B - Virtual size: 127B

.rsrc
Size: 512B - Virtual size: 4B