ac5bfdb3ac34a4ab3c91fba3843dbe2c9b92cc38a0b5041045edf02b98fd51b5

Sharing

Copy URL Twitter E-mail

General

Target

ac5bfdb3ac34a4ab3c91fba3843dbe2c9b92cc38a0b5041045edf02b98fd51b5
Size

352KB
MD5

037437295a9665e67b9304c53542d916
SHA1

e2cf41d6e91d31a4a3375b0dbb4f51b53ef79663
SHA256

ac5bfdb3ac34a4ab3c91fba3843dbe2c9b92cc38a0b5041045edf02b98fd51b5
SHA512

8e816e29cf950e18520ce1df762d0815f0d14a7b94715b00b075c8c1d8584541e5fa3812c1f1005781327165150254fd8f717cf93b517e517cea6dc56417bf55
SSDEEP

6144:SW3WWWSIp0o7XSremM1PfqNEtcOxc7eAh2iOgdu5oP7sUsMQz48Bulbv:wPbrXVprtdc6y2iZiop98UN

Score

N/A

Malware Config

Signatures

Files

ac5bfdb3ac34a4ab3c91fba3843dbe2c9b92cc38a0b5041045edf02b98fd51b5
.exe windows x86

8255499731cfe3a596fa8775775bd650

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FillConsoleOutputCharacterA
GetConsoleMode
PeekConsoleInputW
EnumCalendarInfoA
GetVersionExA
GetModuleHandleA
IsBadStringPtrW
CreateThread
GetSystemDirectoryA
GetModuleFileNameW
GetDiskFreeSpaceA
SetThreadPriorityBoost
GetSystemDefaultLangID
WritePrivateProfileStringW
SetEvent
GetSystemDirectoryW
IsValidLocale
GlobalReAlloc
WaitForSingleObject
GlobalFlags
GetLongPathNameW
LoadLibraryW
VirtualProtect
IsBadWritePtr
FindNextFileW
GetLongPathNameA
MoveFileExW
SetProcessAffinityMask
WriteConsoleOutputA
GetStartupInfoA

user32

CreateAcceleratorTableW
FindWindowExW
EnableScrollBar
RegisterClassExA
LoadAcceleratorsA
GetMessageW
PtInRect
CascadeWindows
OpenDesktopW
ModifyMenuA
GetWindowRect
OpenWindowStationW
GetProcessWindowStation
PostThreadMessageA
GetClientRect
EndDialog
GetKeyboardLayoutNameA
GetNextDlgGroupItem
WaitForInputIdle
UnregisterHotKey
DialogBoxParamA
CreateWindowExA
CreateMDIWindowW
BeginPaint
RegisterClassW
MsgWaitForMultipleObjectsEx
GetWindow
TranslateMessage
SetCaretPos
GetUserObjectInformationA
GetWindowContextHelpId
DefDlgProcW
KillTimer
SendMessageW

gdi32

CreateRectRgnIndirect
EnumFontFamiliesExW
SetMapMode
SetTextColor
SetPolyFillMode
GetBrushOrgEx
SetGraphicsMode
RoundRect
GetObjectA
AddFontResourceW
CreateHalftonePalette
GetClipBox
LineDDA
GetTextCharacterExtra
GetViewportExtEx

comdlg32

ChooseFontW
GetOpenFileNameW
GetOpenFileNameA

advapi32

LookupAccountSidW
CryptSetKeyParam
NotifyChangeEventLog
RegCloseKey
RegSetValueExA
CryptGenRandom

ole32

CoTaskMemFree
CoFreeAllLibraries
MkParseDisplayName
CoGetCallContext
CoIsOle1Class

oleaut32

VariantInit
SysAllocString
SafeArrayPtrOfIndex
SafeArrayGetElement
VariantChangeTypeEx

shlwapi

AssocQueryStringW
StrCatBuffW
PathCompactPathW
PathCommonPrefixW
PathIsPrefixW
SHRegSetUSValueW
StrChrIW
ChrCmpIW
StrStrIW
PathStripToRootA
SHRegGetUSValueW
PathRemoveExtensionW
StrRStrIW
PathGetCharTypeA
PathIsUNCA
PathCombineA
StrChrW
PathAddBackslashA

msvcrt

__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8255499731cfe3a596fa8775775bd650

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

shlwapi

msvcrt

Sections

.text Size: 304KB - Virtual size: 301KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 40KB - Virtual size: 39KB

.text
Size: 304KB - Virtual size: 301KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 40KB - Virtual size: 39KB