b6776cff75d8d6d55d14cc852a323d71f566579ca0b1759acb9b0002ae8ecdc5

Sharing

Copy URL Twitter E-mail

General

Target

b6776cff75d8d6d55d14cc852a323d71f566579ca0b1759acb9b0002ae8ecdc5
Size

645KB
MD5

d11b6987e231f1818309717570fb411d
SHA1

a8c529023bab081eeaff03a5dff939d5737f4243
SHA256

b6776cff75d8d6d55d14cc852a323d71f566579ca0b1759acb9b0002ae8ecdc5
SHA512

053f2b3f8a9c786d0dbd2424cb301964fe150383fce99db04430fd78aafb061c7b71d2900b508c2cde11e99312a9046bc527ec7067f0ce4581a97d5ce622037e
SSDEEP

12288:6bo4W4kWNHcM1KRKQdUI45QE5qM6UHrbGUUYTPGlse8bRv:6bocLtKRKQdUI45QE5qPOrbGUUYTPcsv

Score

N/A

Malware Config

Signatures

Files

b6776cff75d8d6d55d14cc852a323d71f566579ca0b1759acb9b0002ae8ecdc5
.exe windows x86

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
SizeofResource
FreeResource
GlobalUnlock
LockResource
GlobalLock
GlobalFree
GlobalAlloc
FindResourceW
LoadResource
MulDiv
InterlockedDecrement
InterlockedIncrement
GetFileSize
WriteFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
CreateFileA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
SetEndOfFile
GetLocaleInfoA
LoadLibraryA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
RaiseException
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
lstrlenW
GetLongPathNameW
GetTempFileNameW
SetFileTime
GetFullPathNameW
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
GetCurrentThreadId
WaitForSingleObject
GetLastError
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
lstrcmpW
CreateFileW
ReadFile
SetFilePointer
ResetEvent
SetEvent
CreateEventW
CloseHandle
GetModuleHandleW
WinExec
CreateProcessW
Sleep
GetConsoleCP
GetModuleFileNameW

user32

GetSysColor
ClientToScreen
ShowCaret
CreateCaret
CreateAcceleratorTableW
SetCaretPos
HideCaret
InvalidateRgn
PostQuitMessage
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyAcceleratorTable
KillTimer
ShowWindow
RedrawWindow
MoveWindow
OffsetRect
FillRect
DrawTextW
GetParent
GetActiveWindow
GetWindowRect
SystemParametersInfoW
IsZoomed
GetWindowTextW
GetWindowTextLengthW
SetTimer
DrawIconEx
CharPrevW
CharNextW
SetCursor
IntersectRect
IsRectEmpty
CallWindowProcW
DefWindowProcW
LoadImageW
RegisterClassW
SetPropW
EnableWindow
DestroyIcon
RegisterClassExW
GetPropW
LoadCursorW
GetClassInfoExW
LoadBitmapW
CharNextA
LoadStringW
GetMessageW
InvalidateRect
MonitorFromWindow
DispatchMessageW
UpdateLayeredWindow
GetUpdateRect
SetWindowRgn
IsIconic
GetDC
TranslateMessage
IsWindow
SendMessageW
GetFocus
SetFocus
IsChild
SetCapture
ScreenToClient
GetMonitorInfoW
PostMessageW
BeginPaint
CreateWindowExW
PtInRect
EndPaint
GetCursorPos
DestroyWindow
GetKeyState
ReleaseDC
ReleaseCapture
GetClientRect
GetWindow
MapWindowPoints
SetWindowTextW

gdi32

DeleteDC
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreatePen
SelectObject
CombineRgn
BitBlt
GetTextMetricsW
CreateRectRgn
DeleteObject
SetBitmapBits
SelectClipRgn
SetTextColor
RoundRect
GetCharABCWidthsW
SetBkMode
ExtTextOutW
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
CreateRoundRectRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
TextOutW
SetStretchBltMode
GetDeviceCaps
CreateCompatibleBitmap
GetBitmapBits
Rectangle

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW

ole32

OleLockRunning
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

SysAllocString
OleLoadPicture
SysFreeString

wininet

InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetSetOptionW
InternetCloseHandle

riched20

ord4

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

Sections

.text
Size: 468KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5855842c34820bfbff3b6bb558e67025

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

riched20

comctl32

msimg32

Sections

.text Size: 468KB - Virtual size: 466KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 19KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 468KB - Virtual size: 466KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 64KB - Virtual size: 60KB