a18a6920119da99743f043b2587c9c3cead53e473c7382de4edb8e5457577eca

Sharing

Copy URL Twitter E-mail

General

Target

a18a6920119da99743f043b2587c9c3cead53e473c7382de4edb8e5457577eca
Size

603KB
MD5

e7ba09c2b6f6e5d7af3e16b210998f7e
SHA1

0209dc15e91694a4216c39c6f8ebbb991d8d95ed
SHA256

a18a6920119da99743f043b2587c9c3cead53e473c7382de4edb8e5457577eca
SHA512

7b94ae6993184b99524b17a968990586bca3deb13374b25159d23bd0b3d103b8ce8fdbf5f36e9e6baab1afceaf085cf0f9daa9c8d072a770f6f5e2e42b618378
SSDEEP

12288:3FpnYUXC7rurQLVRenz6t3FKFeCn2jzW9NTTFSn0et+3:3FpYIC7oQWz6JIN2jq9NThSnly

Score

N/A

Malware Config

Signatures

Files

a18a6920119da99743f043b2587c9c3cead53e473c7382de4edb8e5457577eca
.exe windows x86

4235450065837fc6e759508682c0f613

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
MapVirtualKeyA
RegisterClassA

kernel32

LeaveCriticalSection
SetFilePointer
SetConsoleActiveScreenBuffer
TlsFree
HeapReAlloc
GetModuleFileNameA
GetACP
GetLocalTime
CompareStringA
CloseHandle
GetModuleHandleA
GetCurrentThread
GetStringTypeW
GetLocaleInfoW
FlushViewOfFile
GetEnvironmentStringsW
GetSystemDirectoryW
InterlockedExchange
SetStdHandle
VirtualFree
GetLastError
HeapFree
ReadFile
LoadLibraryA
GetStartupInfoA
HeapDestroy
GetSystemTimeAsFileTime
GetCommandLineA
InterlockedDecrement
SetEnvironmentVariableA
WriteConsoleInputA
RtlUnwind
TlsGetValue
EnterCriticalSection
GetStdHandle
TlsSetValue
IsBadWritePtr
GetCurrentProcess
GetOEMCP
GetCPInfo
GetCurrentProcessId
HeapCreate
GetEnvironmentStrings
GetVersion
OpenMutexA
CreateMutexA
QueryPerformanceCounter
GetCurrentThreadId
GetTimeZoneInformation
WideCharToMultiByte
GetSystemTime
FreeEnvironmentStringsW
GetSystemDefaultLCID
VirtualQuery
GlobalFindAtomA
VirtualAlloc
UnhandledExceptionFilter
TlsAlloc
GetFileSize
SetCurrentDirectoryA
SetLastError
GetProfileIntA
WriteFile
InitializeCriticalSection
CompareStringW
GetThreadLocale
GetCalendarInfoW
GetFileTime
GetStringTypeA
GetTickCount
DeleteCriticalSection
GetFileType
SetHandleCount
FormatMessageW
OpenFileMappingW
GetProcAddress
TerminateProcess
ExitProcess
MultiByteToWideChar
InterlockedIncrement
UnmapViewOfFile
FlushFileBuffers
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FormatMessageA
HeapAlloc

comctl32

InitCommonControlsEx

wininet

InternetReadFileExW
FindNextUrlCacheEntryExA
RetrieveUrlCacheEntryStreamA
CreateUrlCacheEntryA
FtpGetFileSize
IsUrlCacheEntryExpiredA
InternetQueryFortezzaStatus
DeleteIE3Cache

gdi32

Ellipse
GetColorSpace
RoundRect
CopyMetaFileA
SelectClipRgn
FloodFill

comdlg32

ReplaceTextA
ChooseFontW
ChooseFontA
PrintDlgA

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 361KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4235450065837fc6e759508682c0f613

Headers

File Characteristics

Imports

user32

kernel32

comctl32

wininet

gdi32

comdlg32

Sections

.text Size: 232KB - Virtual size: 231KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 361KB - Virtual size: 360KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 232KB - Virtual size: 231KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 361KB - Virtual size: 360KB

.rsrc
Size: 4KB - Virtual size: 4KB