55b72f406430fd591185999c74636e0afb25d19ac4e70b63b065f1ce2a6da55d

Sharing

Copy URL Twitter E-mail

General

Target

55b72f406430fd591185999c74636e0afb25d19ac4e70b63b065f1ce2a6da55d
Size

124KB
MD5

5df32db30c65236437a48631a1cafc38
SHA1

271e4d3f9c18d1abcc36d9085975637e675b7b5c
SHA256

55b72f406430fd591185999c74636e0afb25d19ac4e70b63b065f1ce2a6da55d
SHA512

5571dda7c6379492f3d207ec8838955ca25c9f41aa6c67e8d46d1a4c3d762e568a7a002aeef95b95b6178480737ee708772463bad75fb4e9ccac03b78c95f1e6
SSDEEP

3072:k5XePO3ivbETgBsnhkgmSiw7RQWalBhSbJlLfBHT:gX27D1Kiw9Rc8vF

Score

N/A

Malware Config

Signatures

Files

55b72f406430fd591185999c74636e0afb25d19ac4e70b63b065f1ce2a6da55d
.exe windows x86

93aa2d27c8ab58063b5ce2d6fbf674f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
DebugBreak
OutputDebugStringW
lstrlenA
HeapDestroy
GetLastError
CreateMutexW
FreeResource
GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceW
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
Sleep
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
CreateProcessW
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapSize
TerminateProcess
SetLastError
TlsAlloc
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
HeapFree
ExitThread
TlsGetValue
TlsSetValue
CreateThread
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc
HeapReAlloc
RtlUnwind
WaitForSingleObject
GetModuleFileNameW
WritePrivateProfileStringW
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
InterlockedIncrement
SetProcessWorkingSetSize
WriteFile
InterlockedDecrement
CreateFileW
CloseHandle
GetCurrentProcess
FlushInstructionCache
lstrlenW
SetUnhandledExceptionFilter
InterlockedExchange

user32

FillRect
GetClientRect
BeginPaint
SetWindowLongW
InvalidateRect
PtInRect
DefWindowProcW
GetWindowTextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DrawTextW
GetWindowThreadProcessId
CreateDialogIndirectParamW
GetClassInfoW
RegisterClassW
EndDialog
SetCursor
LoadCursorW
GetWindowLongW
CallWindowProcW
GetParent
RegisterClassExW
GetClassInfoExW
RegisterWindowMessageW
GetSysColor
GetDlgItem
ReleaseDC
SendMessageW
SetForegroundWindow
EndPaint
GetDC
SetFocus
CharNextW
wvsprintfW
MessageBoxW
KillTimer
CopyRect
SetTimer
ScreenToClient
DialogBoxParamW
ShowWindow
FindWindowW
PostQuitMessage
GetWindowRect
SystemParametersInfoW
MapWindowPoints
GetSystemMetrics
LoadImageW
IsDialogMessageW
PostMessageW
EqualRect
LoadStringW
wsprintfW
CreateWindowExW
GetWindowTextLengthW
SetWindowTextW
InvalidateRgn
SetCapture
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow
RedrawWindow
DestroyWindow
IsWindow
GetClassNameW
SetWindowPos
GetFocus
IsChild
GetWindow

gdi32

SetBkMode
SetTextColor
SelectObject
CreateSolidBrush
CreateFontW
CreateFontIndirectW
DeleteDC
BitBlt
CreateCompatibleBitmap
GetDeviceCaps
GetObjectW
GetStockObject
ExtTextOutW
DeleteObject
CreateCompatibleDC
SetBkColor

advapi32

RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW

ole32

CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
SysAllocStringLen
LoadRegTypeLi
SysStringLen
DispCallFunc
VariantClear
SysAllocString
SysFreeString

comctl32

_TrackMouseEvent
InitCommonControlsEx

wininet

InternetSetOptionW
InternetReadFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetCrackUrlW
HttpQueryInfoW
InternetGetConnectedState

shlwapi

PathFileExistsW
PathCombineW
PathAppendW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93aa2d27c8ab58063b5ce2d6fbf674f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

shlwapi

iphlpapi

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 8KB - Virtual size: 7KB