f05ea9095a0948d291b82643c83db5eb5e033b12a01400b7bad76f3d1f0cfaff

Sharing

Copy URL Twitter E-mail

General

Target

f05ea9095a0948d291b82643c83db5eb5e033b12a01400b7bad76f3d1f0cfaff
Size

141KB
MD5

b56f24d2fc092fd7da0fb13851dfb8d6
SHA1

431b2f7b7091872b9d7c650a2cd07dc48b048f63
SHA256

f05ea9095a0948d291b82643c83db5eb5e033b12a01400b7bad76f3d1f0cfaff
SHA512

fea603b4fe7dd14e3a84cd152a139150af62c64fc15a124482112f382107c0156f331e4b54da5f9006e348b81d019dbdcf8fa7e1717c3546604e82437158d328
SSDEEP

3072:dVvwQqmJ3oHkPXeRd3nMH1vyvP8sXVkp4WAEZN:fomlXwlEvyvP8MV4PA

Score

N/A

Malware Config

Signatures

Files

f05ea9095a0948d291b82643c83db5eb5e033b12a01400b7bad76f3d1f0cfaff
.exe windows x86

4e1da4201c31d0495593f5d99790d3e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetA
CreateStatusWindowW
ImageList_GetIcon
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Create

kernel32

GetSystemDefaultUILanguage
GetModuleFileNameA
LocalUnlock
CreateDirectoryA
GetComputerNameExA
CompareStringA
SetThreadPriority
LockResource
GetThreadPriority
SetCurrentDirectoryA
CreateFileMappingA
LockFile
DisconnectNamedPipe
LocalAlloc
FormatMessageA
GlobalAddAtomA
DeleteCriticalSection
GetVersion
HeapFree
SystemTimeToFileTime
FindFirstFileA
GetBinaryTypeA
GetVersionExW
OpenFile
CreateNamedPipeW
IsBadCodePtr
lstrlenA
InitializeCriticalSection
GetSystemWindowsDirectoryA
GetThreadContext
SetTimerQueueTimer
GetProcAddress
GetCurrentThreadId
ReleaseSemaphore
CreateMutexA
CreateFileMappingW
FindCloseChangeNotification
CreateEventA
EnumSystemLocalesA
GetOverlappedResult
MoveFileExW
GetUserDefaultUILanguage
OpenFileMappingW
GlobalFree
SetEvent
GetCompressedFileSizeW
HeapAlloc
GetTempFileNameW
UnhandledExceptionFilter
lstrcmpW
SetCurrentDirectoryW
GetLastError
GlobalAddAtomW
MapViewOfFile
HeapCreate
OpenEventW

user32

ClientToScreen
IsIconic
CharNextA
OffsetRect
DestroyCursor
CharPrevA
InvertRect
GetDlgCtrlID
LoadStringW
GetPropW
AllowSetForegroundWindow
SetWindowTextA
GetKeyboardLayoutList
GetNextDlgTabItem
GetMenuState
GetMessageTime
IsMenu
DrawTextA
WindowFromPoint
DefWindowProcW
CharLowerW
SetFocus
PostThreadMessageW
ClipCursor
LoadCursorW
GetMessageW
SetDlgItemTextW
IsWindowUnicode
ShowCaret
GetTopWindow
SwitchToThisWindow
GetKeyboardLayoutNameW
PostMessageW
GetWindowLongW
CharUpperA
CopyRect
SystemParametersInfoW
FindWindowExA
BeginPaint
IntersectRect
GrayStringW
DrawFrameControl
SetWindowPlacement
OemToCharBuffA
GetActiveWindow
DrawTextW
GetWindowRect
SetScrollPos
GetDCEx
DispatchMessageA
GetKeyState
ScrollWindowEx
CharUpperW
GetCaretPos
GetForegroundWindow
CheckRadioButton
SetWindowLongA
AttachThreadInput
ModifyMenuW
DeferWindowPos
OemToCharA
GetMenu
BeginDeferWindowPos
CharToOemW
GetClassInfoA
MonitorFromRect
MessageBoxExA
ToUnicodeEx
IsCharAlphaA
CascadeWindows
LoadBitmapW
GetAsyncKeyState
GetSystemMetrics
ChildWindowFromPointEx
LoadIconW
CreateDialogParamW
GetMessageExtraInfo
LoadImageW
MoveWindow
OpenInputDesktop
FindWindowExW
UnloadKeyboardLayout
GetClassLongW
CreateAcceleratorTableW
InSendMessageEx
GetNextDlgGroupItem
DrawFocusRect
CharUpperBuffW
MessageBoxA
ShowWindowAsync
GetParent
GetWindow
RegisterClassExA
LockWindowUpdate
GetSystemMenu
RedrawWindow
SetDlgItemInt
CopyAcceleratorTableW
PostThreadMessageA
IsZoomed
TabbedTextOutW
AppendMenuA
PostQuitMessage
GetUserObjectInformationW
DrawEdge
SetForegroundWindow
IsChild
CharLowerBuffW
ArrangeIconicWindows
VkKeyScanA
SetParent
CallWindowProcW
DestroyWindow
HideCaret
GetKeyboardType
GetWindowPlacement
AdjustWindowRect
IsDialogMessageW
FindWindowA
DispatchMessageW
SendDlgItemMessageW
TileWindows

msvcrt

putc
_controlfp
islower
__set_app_type
strcspn
isalnum
fflush
memset
towlower
fgets
__p__fmode
fclose
calloc
__p__commode
_amsg_exit
strpbrk
qsort
wcsncpy
fseek
fread
sprintf
fwrite
_initterm
iswdigit
putchar
clock
iswctype
_ismbblead
vsprintf
getenv
_XcptFilter
mktime
getc
wcschr
perror
iswspace
ftell
_exit
gets
wcsrchr
isalpha
_cexit
__setusermatherr
setlocale
atoi
floor
isxdigit
__getmainargs

Exports

Exports

?ForceTriangulateA@@YGKDDPAX:O

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reat
Size: 512B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uac
Size: 1KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.riat
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.byte
Size: 1024B - Virtual size: 669B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e1da4201c31d0495593f5d99790d3e5

Headers

File Characteristics

Imports

comctl32

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.reat Size: 512B - Virtual size: 121B

.uac Size: 1KB - Virtual size: 123KB

.riat Size: 6KB - Virtual size: 5KB

.byte Size: 1024B - Virtual size: 669B

.vdata Size: 1024B - Virtual size: 704B

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 104KB - Virtual size: 103KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 22KB - Virtual size: 21KB

.reat
Size: 512B - Virtual size: 121B

.uac
Size: 1KB - Virtual size: 123KB

.riat
Size: 6KB - Virtual size: 5KB

.byte
Size: 1024B - Virtual size: 669B

.vdata
Size: 1024B - Virtual size: 704B

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 104KB - Virtual size: 103KB

.reloc
Size: 2KB - Virtual size: 1KB