af97ded94872b2d963c2dbc79d7a0880141ee7d5c598fad4a2da42de477f42b0

Sharing

Copy URL Twitter E-mail

General

Target

af97ded94872b2d963c2dbc79d7a0880141ee7d5c598fad4a2da42de477f42b0
Size

309KB
MD5

0bab8e0d4baa3bfc585689525c6893f5
SHA1

2167f38ce06db56bd4e8b224c44e7db90f14ecb9
SHA256

af97ded94872b2d963c2dbc79d7a0880141ee7d5c598fad4a2da42de477f42b0
SHA512

f060a687227c8d665ea6b9283696a6aab402aea6a3325ab90b2c8e4e10588f97ae14188ef32c0b4ffc2fb081fac9a19c1aa5da171802219fe102f81208b8a2c8
SSDEEP

6144:jULJtcjO2k4HA4Wsz3FPigyrNxOPHvMPIxGRfTj/5:A94HAFG3pigyZxOnMQ4n5

Score

N/A

Malware Config

Signatures

Files

af97ded94872b2d963c2dbc79d7a0880141ee7d5c598fad4a2da42de477f42b0
.exe windows x86

dc44c70a02cbc2848581d52f4fa8defc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowVisible
DdeQueryConvInfo
GetNextDlgTabItem
GetProcessWindowStation
LoadCursorW
UnregisterClassA
GetKeyState
ReplyMessage
GetScrollRange
GetMenuItemRect
GetActiveWindow
OpenClipboard
CheckDlgButton
GetDlgItem
EndDialog
IsDlgButtonChecked
SendDlgItemMessageA
wvsprintfA
SetClipboardData
GetWindowRect
SetWindowPos
SetWindowLongA
KillTimer
IsZoomed
DestroyMenu
EnableMenuItem
IsWindowEnabled
SetFocus
GetCursorPos
ScreenToClient
SendMessageA
CopyIcon
CloseClipboard
CallWindowProcA
MessageBeep
wsprintfA
MessageBoxA
CharUpperA
GetClipboardData
EnumClipboardFormats
EmptyClipboard
IsRectEmpty
SetRect
SetCursor
FindWindowExW
PostMessageW
GetAsyncKeyState
RegisterClipboardFormatW
FillRect
ReleaseCapture
IsWindow
GetDC
ReleaseDC
IntersectRect
SetRectEmpty
CopyRect
CharNextW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
DragAcceptFiles

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExA
LookupPrivilegeValueA

wininet

InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW

gdi32

CreateSolidBrush
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt
GetDeviceCaps
CreateCompatibleDC
DeleteDC

dbghelp

ImageNtHeader
ImageRvaToSection
ImageRvaToVa

kernel32

RtlUnwind
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
HeapFree
VirtualFree
HeapCreate
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
GetProcAddress
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetLastError
SetLastError
LCMapStringW
HeapSize
Sleep
ExitProcess
LocalAlloc
GetCurrentThreadId

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc44c70a02cbc2848581d52f4fa8defc

Headers

DLL Characteristics

File Characteristics

Imports

user32

comdlg32

shell32

advapi32

wininet

gdi32

dbghelp

kernel32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 105KB - Virtual size: 431KB

.rsrc Size: 162KB - Virtual size: 162KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 105KB - Virtual size: 431KB

.rsrc
Size: 162KB - Virtual size: 162KB