a355fd6fe84ae4600b452af34f295d10bf29f5206ab9bc6723cc512bdbcd8aa6

Sharing

Copy URL Twitter E-mail

General

Target

a355fd6fe84ae4600b452af34f295d10bf29f5206ab9bc6723cc512bdbcd8aa6
Size

179KB
MD5

583aa7c883de92734d926a4054d98138
SHA1

af47bb01281449b5a7fd177e8e2639cfe50a5f7e
SHA256

a355fd6fe84ae4600b452af34f295d10bf29f5206ab9bc6723cc512bdbcd8aa6
SHA512

6cc5ec564f64f3ee68d636bf2a7e204144f6cc0828edf5d8862dfbb9755cf26c19e824459c9e369cf1d9c1651a77aa3587abe34aed7c4ca40db0e2082550560e
SSDEEP

3072:EqRl4Ozy4/2AFMAwLVIN2m+qXk/N4TuHAIDJpL9VPtZ5xTuHndWbKfWqK8PZP:E+m4+AeVI2mN08aAI1xPX5xTuHUbSVP

Score

N/A

Malware Config

Signatures

Files

a355fd6fe84ae4600b452af34f295d10bf29f5206ab9bc6723cc512bdbcd8aa6
.exe windows x86

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeA

comctl32

ImageList_GetIcon

user32

OpenDesktopW
AllowSetForegroundWindow
SetCaretPos
LoadStringA
GetActiveWindow
GetKeyboardType
wvsprintfA
DialogBoxParamA
LoadIconA
DialogBoxIndirectParamW
GetForegroundWindow
GetClassInfoA
AttachThreadInput
SetWindowTextA
IsCharUpperA
GetWindowTextA
InsertMenuItemW
GetScrollPos
GetWindowPlacement
DestroyWindow
GetClipCursor
CharPrevW
ClientToScreen
FillRect
HiliteMenuItem
CreateDialogParamW
CreateAcceleratorTableW
InvalidateRect
LoadMenuA
SetDlgItemTextW
CharUpperA
GetIconInfo
WaitMessage
GetTopWindow
DefDlgProcW
OpenIcon
GetMessageW
ModifyMenuW
ArrangeIconicWindows
DragObject
SetTimer
CreateMenu
GetKeyboardLayout
CreateIconFromResource
LoadAcceleratorsW
CreateCaret
WindowFromPoint
SendMessageTimeoutW
MapDialogRect
GetDlgItemTextW
GetWindowLongW
SetDlgItemInt

gdi32

CreateBrushIndirect
GetLayout
SelectPalette
GetPaletteEntries
GetROP2
CreateDiscardableBitmap
SetBkMode
GetBitmapBits
SetMapMode
GetTextColor
GetWindowOrgEx
OffsetViewportOrgEx
TextOutA
CreateBitmap
CreatePalette
CreatePolygonRgn
ExtTextOutW
PolyBezier
GetMapMode
SelectObject
SetStretchBltMode
SetRectRgn
GetViewportOrgEx

kernel32

GetPriorityClass
FindFirstChangeNotificationW
GetLongPathNameW
GlobalHandle
AddAtomW
FlushFileBuffers
SetEvent
CancelIo
WaitForMultipleObjectsEx
HeapSize
VerifyVersionInfoW
FlushViewOfFile
lstrcmpW
GetACP
EscapeCommFunction
GetModuleFileNameA
SetThreadLocale
ResumeThread
FindFirstFileA
ConvertDefaultLocale
IsBadReadPtr
FindCloseChangeNotification
LoadResource
MoveFileExA
VerSetConditionMask
SetFileApisToOEM
SetFileTime
lstrcmpiA
EnumSystemLocalesA
FindResourceExA
GetWindowsDirectoryW
GetTickCount
FindNextFileW
GetFileAttributesExW
CreateSemaphoreA
GetVersionExA
GlobalAddAtomA
FoldStringW
IsBadStringPtrW
MoveFileA
GetStartupInfoA
GetOverlappedResult
SetSystemTimeAdjustment
EnumResourceNamesA
GlobalMemoryStatus
RaiseException
RemoveDirectoryW
ConnectNamedPipe

Exports

Exports

IsValidScreenA
OnHeaderNew
RtlFullNameNew
InsertValueW
RtlAnchor
FullNameExA
SendScreenEx
CloseMutantW
OnMonitor
AppNameOld
FormatCharOld
RtlFunctionEx
GenerateDataOld
FindDataA
PutMediaType
KillRectOld
ValidateVersion
CancelFolderPathOriginal
LoadClassA
IsNotHeight
CallObjectEx
InsertWindowOld
FormatDeviceOld
FindFolderExA
IncrementMutexExA
IsValidEventOld
LoadNameOld
ModifySizeOld
InstallWindowInfoNew
RtlConfigEx
CopyListOld
ValidateExpressionW

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.On59
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Zek
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sty
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ff38aa401ce5ce479e1dbb4f5740fd4

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

comctl32

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.On59 Size: 3KB - Virtual size: 2KB

.Zek Size: 1024B - Virtual size: 822B

.Re82 Size: 22KB - Virtual size: 25KB

.Sty Size: 512B - Virtual size: 64B

.Lax503 Size: 512B - Virtual size: 450B

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 140KB - Virtual size: 140KB

.On59
Size: 3KB - Virtual size: 2KB

.Zek
Size: 1024B - Virtual size: 822B

.Re82
Size: 22KB - Virtual size: 25KB

.Sty
Size: 512B - Virtual size: 64B

.Lax503
Size: 512B - Virtual size: 450B

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB