9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c

Sharing

Copy URL

Twitter E-mail

General

Target

9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c
Size

415KB
MD5

6ee61a8ea89471e750b1fd1fc898e7b3
SHA1

c7c0e2be23ab5db4f38a5f6d7f2e08b8a80b1ceb
SHA256

9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c
SHA512

5a8f47806c71bbf79e7e7f779f35dc73e1930b42e808a5c877306f3e08cc213eab915f626674dc3e7ac0143adf22c904553703d2714221cb8d4a3df9e7b73d2d
SSDEEP

12288:jJzq2VX1a2TuYGXSod0GTNmR3Aa4WBVvjv+:jJzqiLGXSodZMGWBVC

Score

N/A

Malware Config

Signatures

Files

9154d4827531c00d2e715627abd691b4b63f210644de80d5108b38062fb3193c
.exe windows x86

9414b763551505cc97ef7c209f45c0d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
LoadLibraryA
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetLocaleInfoA
FreeLibrary
lstrcpyA
GetModuleFileNameW
TerminateProcess
InterlockedIncrement
GetWindowsDirectoryA
WideCharToMultiByte
GetUserDefaultLCID
GetLocalTime
MultiByteToWideChar
HeapDestroy
RaiseException
lstrcpynW
GetCalendarInfoW
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareStringW
GetLocaleInfoW
GetModuleFileNameA
FileTimeToSystemTime
GetACP
GetProcessHeap
FileTimeToLocalFileTime
GetModuleHandleW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
GetCPInfo
GetOEMCP
GetFileType
SetHandleCount
GetLastError
UnhandledExceptionFilter
GetStdHandle
WriteFile
ExitProcess
VirtualQuery
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetSystemInfo
GetStartupInfoA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetProcAddress
lstrlenA
FormatMessageA
CompareStringA
ExpandEnvironmentStringsW
lstrlenW
GlobalFree
FormatMessageW
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcmpiW
WriteProfileStringW
LocalAlloc
LocalFree
DisableThreadLibraryCalls
GetCommandLineA
GetDateFormatW
VirtualProtect

user32

wsprintfW
IsCharAlphaNumericW
MessageBoxW
GetFocus
GetParent
SendDlgItemMessageW
LoadIconW
GetSystemMetrics
EnableWindow
GetClientRect
ShowWindow
GetDlgItem
PostMessageW
GetSysColor
CharNextW
CharNextA
GetWindow
GetWindowThreadProcessId
LoadStringA
SendMessageTimeoutW
SendNotifyMessageW
SendMessageW
LoadStringW
SetWindowLongW
DefDlgProcW
MessageBoxIndirectW
wsprintfA
SetFocus
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PeekMessageA
VkKeyScanA
keybd_event
SetKeyboardState
FindWindowW
FindWindowA
GetDesktopWindow
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
IsWindowEnabled
IsWindowVisible
AttachThreadInput
SetForegroundWindow

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameW
GetUserNameA
ReportEventW
DeregisterEventSource
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegSetValueExW
RegEnumValueW

gdi32

CreateSolidBrush
SetTextColor
DeleteObject
SetBkColor

ole32

StgOpenStorageEx
CoTaskMemFree
FreePropVariantArray
PropVariantClear
PropVariantCopy
CoCreateInstance
CoTaskMemAlloc

Sections

.text
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9414b763551505cc97ef7c209f45c0d8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

Sections

.text Size: 401KB - Virtual size: 400KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 337KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 401KB - Virtual size: 400KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 337KB

.rsrc
Size: 1KB - Virtual size: 1KB