b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069

Sharing

Copy URL

Twitter E-mail

General

Target

b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069
Size

846KB
MD5

10a67df0d415eba48f26e274c01efd7d
SHA1

5b005e2069f2f86f5d855695c8ae47def3dae5fc
SHA256

b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069
SHA512

56795c41a6b8f263594b0d68f542c973b4554a292d88d9e65f6a7e241cbe259b4e9d46d29a5fe3d7e0cda5719f0a96b57d3d1500489931e05d42f17918e2fe7e
SSDEEP

24576:1X7RHmVwH+/w4c6mv2zbsTYuK0HJNsxxMHuN8d6pthv6bdmJav:fAO4c6yHcuK0HJNsX+uNyst5+d7

Score

N/A

Malware Config

Signatures

Files

b29c825dae53a600e1a67b38800e4653cef13438e15777b8bdf74c5e9d085069
.exe windows x86

353bfc28b467ca22940c30fa4701c97d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
HeapFree
CompareStringA
GetLocaleInfoW
CreateNamedPipeA
GetDriveTypeA
GetLocaleInfoA
CreateThread
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
lstrcmpA
SetFilePointer
Sleep
TerminateProcess
HeapAlloc
RaiseException
GetCurrentDirectoryA
VirtualFree
HeapSize
LCMapStringA
IsValidCodePage
GetProcessHeap
GetFileSize
QueryPerformanceCounter
GetStartupInfoA
GetConsoleCP
GetACP
GetModuleHandleW
FindClose
GetCPInfo
GetModuleFileNameA
SetHandleCount
GetTimeZoneInformation
GetSystemTimeAsFileTime
WriteConsoleA
lstrlenA
WideCharToMultiByte
GetVersionExA
GetStringTypeW
ExitThread
TlsSetValue
DeleteFileA
SetStdHandle
LoadLibraryA
LCMapStringW
ResetEvent
GetProcAddress
InterlockedDecrement
GetVersion
HeapCreate
InterlockedIncrement
GetCommandLineA
TlsAlloc
GlobalUnlock
ExitProcess
GetModuleHandleA
GetFileAttributesA
GetOEMCP
lstrcpyA
CloseHandle
WriteFile
GetConsoleMode
EnumSystemLocalesA
LeaveCriticalSection
GlobalAlloc
CreateEventA
GetLastError
CompareStringW
UnhandledExceptionFilter
lstrcpynA
GetFileInformationByHandle
SetLastError
SetConsoleTitleA
SetEnvironmentVariableA
SetThreadPriority
GetTickCount
GlobalLock
TlsFree
ResumeThread
SetEndOfFile
ReadFile
Beep
CreateFileA
GetDiskFreeSpaceExA
FileTimeToSystemTime
GetFileType
GetEnvironmentStrings
InitializeCriticalSection
EnterCriticalSection
FlushFileBuffers
GetCurrentProcess
GetCurrentThread
IsDebuggerPresent
GetFullPathNameA
FreeEnvironmentStringsA
FindFirstFileA
GetEnvironmentStringsW
GetCurrentThreadId
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
GetConsoleOutputCP
GetUserDefaultLCID
WaitForSingleObject
RtlUnwind
GetStdHandle
FileTimeToLocalFileTime
HeapReAlloc
TlsGetValue
IsValidLocale
PeekNamedPipe
GetCurrentProcessId
ConnectNamedPipe
WriteConsoleW
DeviceIoControl
DeleteCriticalSection
FreeEnvironmentStringsW
GetStringTypeA
VirtualAlloc

user32

CheckMenuItem
RegisterClassA
CallWindowProcA
SetCursorPos
GetDlgItemTextA
DialogBoxParamA
GetActiveWindow
MapDialogRect
wsprintfA
EnableMenuItem
SetFocus
ReleaseDC
PostMessageA
GetDlgItem
UpdateWindow
InvalidateRect
MessageBeep
SetClipboardData
GetClassInfoA
DrawTextA
GetClipboardData
SetRect
EndDialog
LoadMenuA
CloseClipboard
SetParent
OpenClipboard
SetWindowLongA
ScreenToClient
IsWindowEnabled
SendMessageA
GetWindowRect
PostQuitMessage
GetParent
KillTimer
GetSysColorBrush
TranslateMessage
IsWindowVisible
EndPaint
GetDlgItemInt
AdjustWindowRect
SetWindowTextA
GetCursorPos
SetCursor
GetWindowTextA
MessageBoxA
FindWindowA
SetTimer
LoadCursorA
ClientToScreen
EmptyClipboard
GetKeyState
RegisterClassExA
CreateWindowExA
BeginPaint
GetDesktopWindow
EnableWindow
GetSubMenu
SetWindowPos
AdjustWindowRectEx
GetForegroundWindow
ShowCursor
GetMessageA
GetDC
DispatchMessageA
GetMessageTime
GetWindowLongA
GetSystemMetrics
GetSysColor
ShowWindow
DestroyWindow
DefWindowProcA
GetClientRect
MoveWindow
GetFocus
LoadIconA

gdi32

GetTextFaceA
DPtoLP
PatBlt
StretchBlt
SetBkMode
StretchDIBits
DeleteObject
CreateBitmap
GetTextMetricsA
SetBitmapBits
SelectObject
CreateFontIndirectA
SetMapMode
SetBkColor
GetObjectA
CreateCompatibleBitmap
SetTextColor
DeleteDC
CreateCompatibleDC
GetStockObject
BitBlt
GetMapMode

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
ChooseFontA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA

comctl32

ord16
ord17
ord4
ord6

winmm

waveOutWrite
midiOutOpen
midiOutLongMsg
midiOutClose
waveOutReset
waveOutClose
midiOutShortMsg
waveOutGetErrorTextA
waveOutUnprepareHeader
midiOutPrepareHeader
midiOutReset
waveOutOpen
midiOutUnprepareHeader
joyGetPos
waveOutPrepareHeader

wsock32

bind
WSACleanup
connect
closesocket
recv
WSAStartup
htons
socket
ntohs
gethostbyname
accept
htonl
select
setsockopt
listen
ntohl
send

secur32

DeleteSecurityContext

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textes
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 206KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.catow
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

353bfc28b467ca22940c30fa4701c97d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

winmm

wsock32

secur32

Sections

.text Size: 106KB - Virtual size: 106KB

.textes Size: 222KB - Virtual size: 222KB

.rdata Size: 280KB - Virtual size: 279KB

.data Size: 206KB - Virtual size: 5.5MB

.catow Size: 8KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 57B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 106KB - Virtual size: 106KB

.textes
Size: 222KB - Virtual size: 222KB

.rdata
Size: 280KB - Virtual size: 279KB

.data
Size: 206KB - Virtual size: 5.5MB

.catow
Size: 8KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 57B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 7KB - Virtual size: 7KB