c93cc1cf55a020f2cd90b6a1f6bd8307394f65872ab94e862f4d672b952821ed

Sharing

Copy URL Twitter E-mail

General

Target

c93cc1cf55a020f2cd90b6a1f6bd8307394f65872ab94e862f4d672b952821ed
Size

396KB
MD5

ab5340e5d61b8b3c77c63953a37f3ea0
SHA1

93f36ffb91090aa83c3abd95e5bd0fa833bcd593
SHA256

c93cc1cf55a020f2cd90b6a1f6bd8307394f65872ab94e862f4d672b952821ed
SHA512

3555964447bb58d16d6b46583f375b6a2735dc7c03d6f662c7403702ca4229b1f799bb67c8ea4331524cd699ef9e434b1500a2a00106bfb956f9ebd646334272
SSDEEP

6144:Ftx3Zii0ajZTv/p3yYeHkzWS5VjaNYHzwFrz:jx3zZjZj9yYtikpHcJ

Score

N/A

Malware Config

Signatures

Files

c93cc1cf55a020f2cd90b6a1f6bd8307394f65872ab94e862f4d672b952821ed
.exe windows x86

a45b8cacd89b3b370af7f0408fb7b587

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
TlsFree
GetLocalTime
GetVersion
GetOEMCP
SetHandleCount
GetEnvironmentStrings
GetCurrentThread
WriteFile
FlushFileBuffers
FreeEnvironmentStringsA
EnterCriticalSection
GetFileType
GetStdHandle
GetCurrentThreadId
TerminateProcess
HeapReAlloc
CompareStringA
IsBadWritePtr
ReadConsoleInputA
SetStdHandle
HeapAlloc
QueryPerformanceCounter
HeapDestroy
OpenMutexA
GetModuleFileNameA
DeleteCriticalSection
GetCPInfo
GetTickCount
MultiByteToWideChar
SetEnvironmentVariableA
InterlockedDecrement
RtlUnwind
WideCharToMultiByte
SetFilePointer
UnhandledExceptionFilter
GetCurrentProcess
TlsSetValue
LCMapStringW
InitializeCriticalSection
SetLastError
HeapFree
GetModuleHandleA
VirtualQuery
CloseHandle
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeW
GetSystemTime
GetProcAddress
TlsAlloc
LeaveCriticalSection
CreateMutexA
ReadFile
TlsGetValue
VirtualAlloc
InterlockedIncrement
LCMapStringA
ExpandEnvironmentStringsA
FreeEnvironmentStringsW
LoadLibraryA
GetTimeZoneInformation
GetACP
CompareStringW
GetLastError
ExitProcess
GetCurrentProcessId
VirtualFree
HeapCreate

user32

ScrollWindow
InvertRect
DdeCmpStringHandles
DestroyMenu
SetMenuItemInfoA
CharUpperBuffW
MessageBoxW
DefDlgProcW
CreateWindowExA
InsertMenuA
SetCaretPos
DefWindowProcA
InsertMenuItemA
RegisterClassA
DialogBoxParamW
FindWindowExW
LoadCursorW
InvalidateRect
DestroyWindow
CallNextHookEx
SetCursorPos
GetDlgItemTextA
RegisterClassExA
SetClassLongA
ShowWindow
SetMenuInfo
WaitMessage
DdePostAdvise
SetWindowsHookExA
MsgWaitForMultipleObjects

shell32

FindExecutableW
SHUpdateRecycleBinIcon
SHGetPathFromIDListA
DragQueryFileAorW
DragQueryFile

comctl32

MakeDragList
InitCommonControlsEx
ImageList_DragMove
ImageList_DrawIndirect
ImageList_Copy
ImageList_SetDragCursorImage

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a45b8cacd89b3b370af7f0408fb7b587

Headers

File Characteristics

Imports

kernel32

user32

shell32

comctl32

Sections

.text Size: 196KB - Virtual size: 195KB

.rdata Size: 8KB - Virtual size: 12KB

.data Size: 85KB - Virtual size: 84KB

.rsrc Size: 106KB - Virtual size: 105KB

.text
Size: 196KB - Virtual size: 195KB

.rdata
Size: 8KB - Virtual size: 12KB

.data
Size: 85KB - Virtual size: 84KB

.rsrc
Size: 106KB - Virtual size: 105KB