b78818cb5a65872c67ccb981dab789838d73002c19128d21cc8bbf6e6bbdcc6b

Sharing

Copy URL Twitter E-mail

General

Target

b78818cb5a65872c67ccb981dab789838d73002c19128d21cc8bbf6e6bbdcc6b
Size

140KB
MD5

8e72a069dbb32677c614127839dbc3f9
SHA1

4ac5bcd728768e8610b4eddff4bbf1830fd07c1e
SHA256

b78818cb5a65872c67ccb981dab789838d73002c19128d21cc8bbf6e6bbdcc6b
SHA512

695e807b3f0bb4d0e6249dfa20af4891bebc3855e32b61f2ee1611593b8d4d7b352910d08a2268bd899317af7d0fa11609fb532b98192c45b411855007cf1461
SSDEEP

3072:GC3Ue+0fKpMZtujJEC0j9QCbyvZOo7+J43oEo2BtLD/3vDDff3D:GLycMZtu15Cbyhg43ztfjrPD

Score

N/A

Malware Config

Signatures

Files

b78818cb5a65872c67ccb981dab789838d73002c19128d21cc8bbf6e6bbdcc6b
.exe windows x86

c5eb66abb2dcd4dd957ce1a3eb1ac06f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscpy
calloc
_controlfp
__set_app_type
putchar
__p__fmode
__p__commode
fseek
setlocale
system
strncmp
strncpy
wcsncmp
towupper
puts
iswalpha
mktime
strcpy
_amsg_exit
_initterm
_ismbblead
rand
_XcptFilter
strspn
strtok
strtoul
_exit
_cexit
iswspace
toupper
wcslen
fread
iswxdigit
clearerr
localtime
isprint
putc
mbstowcs
_vsnwprintf
wcsrchr
__setusermatherr
iswprint
isxdigit
swscanf
isdigit
__getmainargs
isupper
isalnum

user32

CharNextExA
ScreenToClient
CreatePopupMenu
CopyRect
SetCursorPos
IsCharAlphaNumericW
SetRectEmpty
SetWindowLongW
ChildWindowFromPoint
ChangeMenuW
IsCharAlphaA
PostThreadMessageW
IsIconic
SetScrollRange
SetSysColors
ModifyMenuW
MapWindowPoints
ClipCursor
GetWindowTextLengthW
DialogBoxParamW
FillRect
UnionRect
DeleteMenu
GetClassLongA
GetClassInfoW
ShowScrollBar
OpenDesktopW
GetLastActivePopup
SystemParametersInfoA
ScrollWindowEx
CreateIconIndirect
LoadMenuA
GetDlgItemTextA
GetMonitorInfoW
LoadStringW
LoadBitmapW
ValidateRect
SetDlgItemTextW
CharPrevW
GetKeyboardType
MessageBoxExA
RemoveMenu
SetMenu
WaitForInputIdle
SetMenuItemBitmaps
SetFocus
ScrollWindow
wvsprintfA
DestroyMenu
PostMessageA
SendNotifyMessageW
ExitWindowsEx
RegisterClassW
RegisterClassExW
GetDlgItemTextW
LoadIconA
MapVirtualKeyW
GetMenuItemID
DefFrameProcW
GetMessageExtraInfo
IntersectRect
GetWindow
DestroyCaret
SetLastErrorEx
SetTimer
BringWindowToTop
MonitorFromRect
SetActiveWindow
GetNextDlgGroupItem
GetFocus
FindWindowExA
wsprintfW
SetWindowPos
TranslateAcceleratorW
wsprintfA
TranslateAcceleratorA
CallWindowProcW
GetScrollRange
GetSystemMetrics
WaitMessage
GetForegroundWindow
CreateWindowExA
SendDlgItemMessageW
OffsetRect
LoadAcceleratorsW
SetDlgItemTextA
DialogBoxParamA
LockWindowUpdate
SetRect
PostMessageW
GetIconInfo
LoadImageW
SendMessageA
IsCharUpperA
IsWindowEnabled
AppendMenuW
CharUpperBuffW
CreateWindowExW
EnumWindows
GetMenuState
SetCaretPos
EqualRect
IsZoomed
ShowCaret
DestroyAcceleratorTable
LoadIconW
EnableWindow
CopyImage
GetPropW
GetShellWindow
EnumChildWindows
LookupIconIdFromDirectory
DrawEdge
ShowCursor
MessageBoxW
GetMenuCheckMarkDimensions
CheckRadioButton
DrawTextA

shlwapi

UrlGetPartW

comctl32

ImageList_GetImageCount
ImageList_ReplaceIcon
PropertySheetW
ImageList_GetIconSize
CreatePropertySheetPageA
ImageList_LoadImageW

kernel32

GetFileTime
SetUnhandledExceptionFilter
GetCompressedFileSizeW
GlobalFindAtomW
LoadLibraryW
SetCommBreak
CreateFileA
OpenFileMappingW
GetSystemDefaultUILanguage
ReadFile
GetModuleHandleW
ReleaseMutex
CompareStringW
CreateNamedPipeW
UnlockFile
GetFileAttributesExW
GetUserDefaultUILanguage
RegisterWaitForSingleObject
WaitCommEvent
GetFullPathNameW
GetModuleFileNameA
GetSystemDirectoryA
GetCommModemStatus
CreatePipe
GetVersionExW
SetSystemTime
GlobalAddAtomW
lstrlenW
FindResourceExW
LoadLibraryExA
GetThreadPriority
GetModuleFileNameW
GetCommProperties
PulseEvent
GetPriorityClass
VirtualProtect
ResumeThread
DeviceIoControl
GetDateFormatW
GetLocaleInfoA
TlsGetValue
GetProcAddress
GetCurrentDirectoryW
VerifyVersionInfoW
GetTickCount
TerminateThread
GetBinaryTypeW
GlobalMemoryStatusEx
GetModuleHandleA
LoadLibraryA
GetFileInformationByHandle
WaitForSingleObjectEx
RemoveDirectoryW
EnumResourceNamesW
lstrcmpiW
FindResourceExA
GetSystemWindowsDirectoryA
GetTempFileNameW

Exports

Exports

?CreatDlgItemList@@YGKPBDDPAX:O

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.exp
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edit
Size: 1KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ixport
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sims
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndat
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5eb66abb2dcd4dd957ce1a3eb1ac06f

Headers

File Characteristics

Imports

msvcrt

user32

shlwapi

comctl32

kernel32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.exp Size: 512B - Virtual size: 121B

.edit Size: 1KB - Virtual size: 123KB

.data Size: 2KB - Virtual size: 2KB

.ixport Size: 6KB - Virtual size: 5KB

.sims Size: 512B - Virtual size: 290B

.ndat Size: 1024B - Virtual size: 704B

.rsrc Size: 104KB - Virtual size: 103KB

.text
Size: 23KB - Virtual size: 22KB

.exp
Size: 512B - Virtual size: 121B

.edit
Size: 1KB - Virtual size: 123KB

.data
Size: 2KB - Virtual size: 2KB

.ixport
Size: 6KB - Virtual size: 5KB

.sims
Size: 512B - Virtual size: 290B

.ndat
Size: 1024B - Virtual size: 704B

.rsrc
Size: 104KB - Virtual size: 103KB