d63a6b11d91306eeafdeb7ed68657d8cbbff59858f83795d5ad929d6603ddabd

Sharing

Copy URL Twitter E-mail

General

Target

d63a6b11d91306eeafdeb7ed68657d8cbbff59858f83795d5ad929d6603ddabd
Size

115KB
MD5

ae3713c10e50f61775d572db8aa8a0c4
SHA1

c65906eb281fc768ecbdf3bec44750c8dc97c8b6
SHA256

d63a6b11d91306eeafdeb7ed68657d8cbbff59858f83795d5ad929d6603ddabd
SHA512

0282156388227fd2320fed15c4d484972e96dffc3aba3173347ea1c4346267a50b836a67b3297b745c03bb0fdc2acd30aad001f06e87c256d2e164a54c49f71c
SSDEEP

1536:dTc8BO3kGUefA4zh8loPBc05lZlLL5Os/9pe7hblshbnRwhXO4ei8UlwhVU4fKfi:NcVfzzh8loVBjpk7A5tH

Score

N/A

Malware Config

Signatures

Files

d63a6b11d91306eeafdeb7ed68657d8cbbff59858f83795d5ad929d6603ddabd
.exe windows x86

c6a64c222ea677f7b2e95279b422616b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA
SHGetMalloc
ShellExecuteA

rasapi32

RasSetEntryPropertiesA
RasGetConnectStatusA
RasHangUpA
RasEnumConnectionsA
RasEnumDevicesA
RasGetProjectionInfoA
RasDialA
RasGetErrorStringA
RasSetEntryDialParamsA
RasDeleteEntryA

kernel32

GetStringTypeA
GetStdHandle
HeapFree
SetHandleCount
HeapReAlloc
ExitProcess
HeapAlloc
GetFileType
GetStringTypeW
GetVersionExA
Sleep
CreateMutexA
OpenMutexA
ReleaseMutex
GetTickCount
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
CreateThread
CopyFileA
DeleteFileA
GetModuleFileNameA
CreateDirectoryA
GetEnvironmentVariableA
RemoveDirectoryA
LocalFree
FormatMessageA
GetLastError
GetLocaleInfoA
CloseHandle
ReadFile
GetFileSize
CreateFileA
MultiByteToWideChar
SetFilePointer
VirtualFree
VirtualAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
WriteFile
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetCommandLineA
RtlUnwind
GetACP
GetCPInfo
HeapCreate
HeapDestroy
GetVersion
FlushFileBuffers
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP

user32

GetClassNameA
EnumChildWindows
EnumWindows
EnableWindow
KillTimer
SetTimer
ShowWindow
SendMessageA
SendDlgItemMessageA
GetWindowRect
SetWindowPos
SetWindowTextA
SetDlgItemTextA
SetFocus
GetDlgItemTextA
EndDialog
DialogBoxParamA
LoadIconA
MessageBoxA
SystemParametersInfoA
CheckDlgButton
GetDlgItem
IsDlgButtonChecked

ole32

CoCreateInstance
CoInitialize

wininet

InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetReadFile
InternetOpenA

gdi32

GetObjectA
CreateFontIndirectA
SetBkColor
SetBkMode
CreateSolidBrush

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c6a64c222ea677f7b2e95279b422616b

Headers

File Characteristics

Imports

advapi32

shell32

rasapi32

kernel32

user32

ole32

wininet

gdi32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 8KB - Virtual size: 8KB

.aspack Size: 8KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 8KB - Virtual size: 8KB

.aspack
Size: 8KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB