0402aa8e807cf8d8ead15d718a4e40f0665848891f1fd4b974f2854c73ae2ecb

Sharing

Copy URL

Twitter E-mail

General

Target

0402aa8e807cf8d8ead15d718a4e40f0665848891f1fd4b974f2854c73ae2ecb
Size

96KB
MD5

b7a725db0777e62a0817a43176cf5ad3
SHA1

14d7e21db9ee86fe1de3e4c20b3be7e9ad45b5f7
SHA256

0402aa8e807cf8d8ead15d718a4e40f0665848891f1fd4b974f2854c73ae2ecb
SHA512

fa83c9a043e6fc7313324a258714dffb2b8ff57bae50eea293cd932e02542b88d14d0dc55ff6e23ef458a64761d623bd57f0a2a96615125e74c7e7d809b7066d
SSDEEP

1536:f9W23VJq30Chiury+P/vetq4JIw6iHPUSNuCQCkDB:w23tYiury+nvec4JIw6iHPJNuCQCkd

Score

N/A

Malware Config

Signatures

Files

0402aa8e807cf8d8ead15d718a4e40f0665848891f1fd4b974f2854c73ae2ecb
.exe windows x86

76667c5dc55010d8d7cc4cbe3ce48c2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3597
ord324
ord825
ord641
ord4234
ord2645
ord800
ord926
ord535
ord537
ord823
ord2642
ord4224
ord6283
ord6282
ord3874
ord3092
ord540
ord1816
ord2379
ord6453
ord4881
ord1871
ord3663
ord3754
ord2841
ord2107
ord6055
ord1776
ord5290
ord4424
ord6215
ord567
ord783
ord5450
ord5440
ord6383
ord6394
ord6197
ord3571
ord3626
ord3634
ord686
ord2414
ord2096
ord1641
ord384
ord1919
ord4275
ord4287
ord2112
ord755
ord2864
ord470
ord858
ord5981
ord3097
ord613
ord289
ord1168
ord665
ord5186
ord354
ord6157
ord5791
ord3692
ord5225
ord4133
ord4297
ord3706
ord5788
ord5787
ord3402
ord3721
ord795
ord860
ord4204
ord2976
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6172
ord5789
ord4425
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord640
ord5785
ord472
ord2754
ord5875
ord6194
ord6021
ord1640
ord323
ord5873
ord2818
ord941
ord4278
ord4129
ord939
ord4277
ord859
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2621
ord1146
ord2302
ord2086
ord6380
ord3619
ord5572
ord2915
ord922
ord2393
ord940
ord5356
ord5808
ord1075
ord5204
ord3229
ord2638
ord6059
ord389
ord1228
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4627
ord4080
ord3079
ord3825
ord3831
ord5794
ord3830
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4710
ord4998
ord4853
ord4376
ord3573
ord5265
ord1576

msvcrt

_setmbcp
_mbscmp
__CxxFrameHandler
_CxxThrowException
_except_handler3
__set_app_type
_ftol
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_controlfp

kernel32

GetModuleHandleA
lstrlenA
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA

user32

GetClassLongA
GetWindow
GetWindowPlacement
GetDlgItem
GetClientRect
IsWindow
IsIconic
EnableWindow
SendMessageA
SetClassLongA
KillTimer
GetWindowRect
LoadBitmapA
GetSysColor
LoadCursorA
FindWindowA
DrawIcon
GetWindowLongA
SetWindowLongA
GetSystemMetrics
SetTimer
LoadIconA
ReleaseCapture
IsChild
FillRect
GrayStringA
DrawTextA
TabbedTextOutA
RedrawWindow
InvalidateRect
SetWindowRgn
SetCursor
GetParent
CopyRect
IsZoomed

gdi32

CreateSolidBrush
GetBkColor
DPtoLP
GetMapMode
LPtoDP
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkMode
CreateFontA
PathToRegion
BeginPath
EndPath
StrokeAndFillPath
CombineRgn
CreatePalette
SetDIBitsToDevice
RealizePalette
StretchDIBits
PtVisible
GetObjectA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyA

shell32

ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_Draw

winmm

timeKillEvent
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

taskkeyhook

?DisableTaskKeys@@YAHHH@Z

mpr

WNetGetUserA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mydata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76667c5dc55010d8d7cc4cbe3ce48c2e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

winmm

taskkeyhook

mpr

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 2KB

.mydata Size: 4KB - Virtual size: 8B

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 2KB

.mydata
Size: 4KB - Virtual size: 8B

.rsrc
Size: 20KB - Virtual size: 17KB