b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6

Sharing

Copy URL Twitter E-mail

General

Target

b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6
Size

252KB
MD5

746f81a527ce711419049a5aa1ae3f3c
SHA1

8edbf03b981ff404f633a4775f69ac702c1ba998
SHA256

b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6
SHA512

897f1832aad7b6d025880cba25b0f266b17702d97efec8e7ef6a5a0ae8cbe45ee8afbc9c47d78624a5a02ab721f0f07062b36cc821ca7f1c715fa770c953bd6c
SSDEEP

6144:3J/ZXypi2kKepX03WzWLmu/NWa4RY0ANlYfjf:xakKM0GzWL7Vh4RY

Score

N/A

Malware Config

Signatures

Files

b618d108b2dbbd49586d419af292a9c9c22cb2d43614c6f79b933622e986b6b6
.exe windows x86

44b21cc5a77c93455334a6d40b4241b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
SetEnvironmentVariableA
SetupComm
IsBadWritePtr
SwitchToFiber
GetLongPathNameA
GetSystemTimeAsFileTime
DeleteCriticalSection
FindCloseChangeNotification
GetNumberFormatW
GetTempPathW
GetConsoleCursorInfo
UnhandledExceptionFilter
EnumSystemCodePagesW
CreateEventA
SetVolumeLabelA
FlushConsoleInputBuffer
GlobalAddAtomA
GetWindowsDirectoryA
GetSystemTime
OpenFile
GetAtomNameA
ReadConsoleInputW
GetProfileStringA
FillConsoleOutputCharacterA
CreateWaitableTimerA
lstrcatW
SetTimeZoneInformation
GetFileInformationByHandle
VirtualProtect
SetCommTimeouts
SetCommMask
CreateNamedPipeW
ReleaseMutex
OutputDebugStringA
GetProcessTimes
GlobalFindAtomW
CreateDirectoryExA
GetDriveTypeW
EnumDateFormatsW
SetThreadAffinityMask
SetFileAttributesA
LocalFileTimeToFileTime
GetEnvironmentVariableW
InitializeCriticalSection
ExitThread
_lopen
GlobalFree
GetModuleHandleA
FatalAppExitA
MoveFileExA
GetFileAttributesExA
SetConsoleMode
GetFileType
GenerateConsoleCtrlEvent
GetVersion
SetStdHandle
FlushFileBuffers
WritePrivateProfileStringA
ReadDirectoryChangesW
SetEvent
CreateMutexA
EraseTape
FindFirstFileExW
SystemTimeToFileTime
VirtualUnlock
FindFirstFileA
WriteConsoleOutputW
SetLastError
DebugBreak
GetStartupInfoA
SetThreadLocale
DosDateTimeToFileTime
FreeLibraryAndExitThread
lstrlenA
OutputDebugStringW
VirtualAlloc

user32

DispatchMessageW
SetDlgItemTextA
DefDlgProcW
FlashWindow
GetWindowLongA
CreateDialogIndirectParamW
GetPropW
IsCharLowerA
IsDialogMessageW
EnumDisplayMonitors
GetPropA
CharNextA
GetTopWindow
EnableScrollBar
DefWindowProcA
InvertRect
EnumDesktopsA
SetMenu
GetAncestor
ScrollWindowEx
GetClipboardOwner
CharNextExA
ExitWindowsEx
CharToOemW
InsertMenuW
GetKeyboardLayout
MessageBeep
EnumDisplaySettingsExA
IsChild
ToUnicode
SetWindowsHookExA
TileWindows
TranslateAcceleratorA
MsgWaitForMultipleObjectsEx
MessageBoxIndirectW
SetTimer
RegisterDeviceNotificationW

gdi32

SetArcDirection
GetTextCharset
GetDIBits
GetTextMetricsA
GetObjectW
GetPixelFormat
AddFontResourceA
CreateFontW
PlayMetaFileRecord
GetEnhMetaFileHeader
DeleteEnhMetaFile
CreateEnhMetaFileW
OffsetViewportOrgEx
GetWinMetaFileBits
SetTextJustification
OffsetWindowOrgEx
DescribePixelFormat
RectVisible
Chord
CreatePolygonRgn
SelectPalette

comdlg32

GetOpenFileNameA
PrintDlgW
ChooseColorA

advapi32

StartServiceCtrlDispatcherW
GetSidLengthRequired
GetFileSecurityA
OpenProcessToken
RegSetKeySecurity
FreeSid
RegLoadKeyA
SetServiceStatus
RegReplaceKeyW
SetSecurityDescriptorGroup
OpenSCManagerA
CryptAcquireContextW
QueryServiceStatus
ObjectDeleteAuditAlarmW
DeleteService
RegConnectRegistryA
CryptGenKey
BuildTrusteeWithNameW
SetNamedSecurityInfoW
AllocateAndInitializeSid
CryptGetUserKey
CloseEventLog
GetSecurityDescriptorLength
RegRestoreKeyW
EnumServicesStatusA
CryptGetProvParam
LookupAccountNameA
SetNamedSecurityInfoA
ReportEventW
LookupAccountSidA
RegLoadKeyW
MapGenericMask
ImpersonateLoggedOnUser
ChangeServiceConfigW
RegOpenKeyW

shell32

SHChangeNotify
SHGetDesktopFolder

ole32

OleFlushClipboard
OleCreateLink

oleaut32

SafeArrayPutElement
LoadTypeLibEx
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayGetLBound

shlwapi

SHDeleteKeyA
StrTrimW
SHAutoComplete
SHQueryValueExW
StrChrA
PathCanonicalizeA
SHRegWriteUSValueW

msvcrt

__p__commode
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44b21cc5a77c93455334a6d40b4241b1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 236KB - Virtual size: 233KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 348B

.text
Size: 236KB - Virtual size: 233KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 348B